Monday, October 24, 2022
HomeCyber SecuritySSH Error — Github or AWS CloudFormation? | by Teri Radichel |...

SSH Error — Github or AWS CloudFormation? | by Teri Radichel | Bugs That Chunk | Oct, 2022


Whereas making an attempt to entry the Github meta API to get the checklist of CIDRs related to GitHub and put them into an AWS Prefix Checklist I randomly acquired this error.

verfiable_password_authentication…

falsessh_key_fingerprints

The factor is, my code by no means modified after I acquired this error. I had run the identical code various instances. After I acquired this error I ran the identical code once more and by no means noticed the error once more.

“Cidr:” within the error message above gave the impression to be a part of the AWS template code I used to be making an attempt to generate. I used to be not utilizing any authentication to get to GitHub. I used to be utilizing SSH to get into an EC2 occasion, nevertheless the code from there was simply utilizing HTTPS to get to GitHub.

Nothing got here up for the precise phrases above within the error message after I searched on Google so initially I assumed that is inner code at both GitHub as a part of their meta API service or AWS CloudFormation.

Then I remembered that I had seen a part of a type of strings within the GitHub meta API I used to be taking a look at:

https://api.github.com/meta

So there now we have:

verfiable_password_authentication

However not:

falsessh_key_fingerprints

However in case you have a look at the above we do have:

“ssh_key_fingerprints”

So in some way the “false” acquired inserted within the flawed place.

And “Cidr” is coming from the CloudFormation template I used to be making an attempt to auto-generate.

So maybe there was some form of parsing drawback that brought about the textual content from the GitHub API to be managed and merged into the CloudFormation template I used to be producing.

That error above looks as if a YAML parsing error so in some way extra knowledge was pulled from GitHub than anticipated. How that occurred, I’m not precisely certain. The API name brings down some knowledge from GitHub after which filters out solely what I want but it surely appeared like the entire file was pulled in quite than the subset of knowledge I wanted.

I had a separate bash operate that pulls down that knowledge so the one factor I may consider was a multi-threading error within the AWS Linux OS the place the primary operate didn’t end processing earlier than the second in what must be a single-threaded software.

At any fee, I by no means noticed the error once more after that one time.

Teri Radichel

When you preferred this story please clap and comply with:

Medium: Teri Radichel or E mail Checklist: Teri Radichel
Twitter: @teriradichel or @2ndSightLab
Requests providers by way of LinkedIn: Teri Radichel or IANS Analysis

© 2nd Sight Lab 2022

____________________________________________

Creator:

Cybersecurity for Executives within the Age of Cloud on Amazon

Want Cloud Safety Coaching? 2nd Sight Lab Cloud Safety Coaching

Is your cloud safe? Rent 2nd Sight Lab for a penetration check or safety evaluation.

Have a Cybersecurity or Cloud Safety Query? Ask Teri Radichel by scheduling a name with IANS Analysis.

Cybersecurity & Cloud Safety Assets by Teri Radichel: Cybersecurity and Cloud safety lessons, articles, white papers, shows, and podcasts



RELATED ARTICLES

LEAVE A REPLY

Please enter your comment!
Please enter your name here

- Advertisment -
Google search engine

Most Popular

Recent Comments