you are viewing a single comment's thread
view the rest of the comments
[–] 14 points 2 weeks ago* (last edited 2 weeks ago) (2 children)

Basically, when choosing a private encryption key - normally a long string of random characters - in a crucial place for widespread Internet security, some knob just used "4".

https://www.theregister.com/security/2026/10/20/indian-certification-authority-emudhras-private-keys-compromised-one-of-them-was-the-number-4/5304312

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 2 weeks ago (1 child)

    What you say is extremely unlikely. No one decided to use 4.

    Either the system they had for generating the key was broken, or they accidentally used a test key for a real system.

  • source
  • parent
  • hideshow 1 child comment