all 14 comments

sorted by: hot top controversial new old
[–] 20 points 2 weeks ago (1 child)

This is why state-of-the-art 24th-century starships get hacked in seconds by aliens who have never even seen the platform or software before.

  • source
  • hideshow 1 child comment
  • [–] 8 points 2 weeks ago (7 children)

    is this a current event post or is 4 the new beans

  • source
  • hideshow 7 child comments
  • [–] 11 points 2 weeks ago (1 child)

    This is about compromised eMudhra intermediate TLS certificates. They were found to have weak private keys - eg. “4”, instead of a normal 116 character key. Major Internet panic for browsers and server admins.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 2 weeks ago (3 children)

    I'm dumb so this is probably more than half wrong, but they discovered a trusted certificate certifier in the middle east publishing dangerously unsafe passkeys. One of which was attached to a sight titled "We've got a problem Dave." Or something with a passkey of 4. Which means for an unknown time most Internet security was bypassed without our knowledge. As far as I'm aware there isn't evidence of someone successfully using the exploit but it's so dangerous that a small chunk of the Internet was completely locked down and things like Linux and many home electronics will be hit more than most.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 2 weeks ago* (2 children)

    Uhm, yeah more than half wrong… An indian certificate authority had produced a set of faulty certificates with private keys between three and eight bits long, when the standard is 384 bits. There is no malicious reason to do this, it was likely incompetence. The effect is that these certificates are trivially easy to reverse-engineer, meaning a bad actor could use them to sign certificates for any web domain, defeating the protection TLS provides against man-in-the-middle attacks. The certificates have already been marked as un-trustworthy on all major web browsers and operating systems, the risk lies with devices that do not get regular updates.

    Edit: additionally, we know exactly when these faulty certificates were made and thus we also know for how long they have been exploitable

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 2 weeks ago (1 child)

    No malicious reason to do this he says, while Modi's coalition or at least the money behind it was known for having backdoor access to all their enemies somehow

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 2 weeks ago

    This isn't a comment on the meme I just love the lighting in these shots

  • source
  • [–] 4 points 2 weeks ago

    Tbf it was all 2fa x3 with a final code

  • source
  • [–] 3 points 2 weeks ago

    Yeah... It's a 384 bits key, so there some 150 zeros there in front of the four.

  • source
  • [–] 3 points 2 weeks ago

    They should at least make a 2-factor self-destruct login like: "insert your personal pet-tribble here"

  • source