[sammyo]

They can't. But there are certainly unsavory actors that are able to trick a certain percentage of the unsuspecting to just give them a private key.

[selestify]

They actually can, in some situations: https://security.googleblog.com/2017/02/announcing-first-sha...