On: Passive SSH Key Compromise via Lattices [pdf]

[hannob]

It is a lot, but it's explainable.

Such bugs tend to show up in crappy IoT hardware. IoT hardware often comes in large numbers.

If you scan the IPv4 space for SSH hosts, most of the ones you'll find are IoT hardware.

[hedora → hannob]

In particular, all the hosts they recovered keys for seem to be some sort of embedded thing, and over 99.9% were from one vendor.