you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 week ago (4 children)

I don't understand what change I am looking at. Can someone ELI5?

  • source
  • hideshow 4 child comments
  • [–] 10 points 1 week ago* (1 child)

    These certificate companies are responsible for keeping internet traffic encrypted.

    They use a private key which you can imagine as a combination number lock of 116 digits.

    This specific company seemed to only be generating numbers that fell in the range of 0 to 256, and at the time of the breach the smallest one was 4.

    I want you to imagine your data being secured with a lock using a numpad of 116 digits. Now imagine the passcode turned out to be 115 zeros and then 4.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 week ago* (last edited 1 week ago)
    1. certificates encrypt web traffic
    2. companies exist to create world trusted certs
    3. these certs are signed by their private key with a random hash generated that's globally unique
    4. is not random enough

    edit: I love that there's only 4 upvotes on this. 🤣

  • source
  • parent