Axosoft company logo

The profile is currenly unclaimed by the seller. All information is provided by CB Insights.

axosoft.com

About Axosoft

Axosoft helps developers manage their agile software development processes, provide their customers with help desk support and collaborate with a team wiki. Transfer Big Files, DashZen and Pure Chat and OnTime are three of its major products.

Axosoft Headquarter Location

13835 N Northsight Blvd Suite 205

Scottsdale, Arizona, 85260,

United States

800.653.0024

Predict your next investment

The CB Insights tech market intelligence platform analyzes millions of data points on venture capital, startups, patents , partnerships and news mentions to help you see tomorrow's opportunities, today.

Latest Axosoft News

GitHub revokes duplicate SSH auth keys linked to library bug

Oct 12, 2021

By GitHub has revoked weak SSH authentication keys generated using a library that incorrectly created duplicate RSA keypairs. GitHub allows you to authenticate to their service without a user name and password using the SSH protocol. To do this, users would generate an SSH keypair and add the public key to their accounts'  SSH key setting . Adding an SSH key to GitHub Once the key has been added to your account, you can use it with a Git client to automatically log in to GitHub without entering a user name and password. GitHub revokes weak SSH keys Today, in a coordinated disclosure between GitHub and Axosoft, LLC., the makers of the popular GitKraken Git client, GitHub said they revoked weak SSH keys generated by the ' keypair ' library used by the software. "An underlying issue with a dependency, called keypair, resulted in the GitKraken client generating weak SSH keys. This issue affected versions 7.6.x, 7.7.x, and 8.0.0 of the GitKraken client, and you can read GitKraken’s disclosure on  their blog ," disclosed GitHub today in a new security advisory . Keypair is a JavaScript library that allows for the programmatic generation of SSH keys. A bug in the library's pseudo-random number generator allowed for the generation of duplicate RSA keys, enabling users to access other GitHub accounts secured with the same SSH key. "A bug in the pseudo-random number generator used by  keypair  versions up to and including 1.0.3 could allow for weak RSA key generation. This could enable an attacker to decrypt confidential messages or gain authorized access to an account belonging to the victim. We recommend replacing any RSA keys that were generated using keypair version 1.0.3 or earlier," explained the Keypair advisory . The bug was discovered by Axosoft engineer Dan Suceava,  "who noticed that  keypair  was regularly generating duplicate RSA keys. "  To protect their users, GitHub revoked all keys generated by GitKraken at 17:00 UTC or 1 PM EST. GitHub also revoked other potentially weak keys that were created by other clients using the same keypair library. Users whose keys have been revoked are notified by GitHub and recommended to review their SSH keys and replace them if the vulnerable library generated them. Axosoft recommends users of their software generate new SSH keys using GitKraken 8.0.1, or later, for each Git service provider. Related Articles:

Axosoft Web Traffic

Rank
Page Views per User (PVPU)
Page Views per Million (PVPM)
Reach per Million (RPM)
CBI Logo

Axosoft Rank

Discover the right solution for your team

The CB Insights tech market intelligence platform analyzes millions of data points on vendors, products, partnerships, and patents to help your team find their next technology solution.

Request a demo

CBI websites generally use certain cookies to enable better interactions with our sites and services. Use of these cookies, which may be stored on your device, permits us to improve and customize your experience. You can read more about your cookie choices at our privacy policy here. By continuing to use this site you are consenting to these choices.