[–] 11 points 2 weeks ago (2 children)

Those keys are the private keys of 8 intermediate certificates. With those keys you can sign any certificate and from a browser(or any other app the consumes TLS) it will look like it was signed by the official intermediate certificate.

So yeah, an attacker could sign fake certificates for any site and pretend to be signed by the trusted eMudhra CA. It requires MitM.

As for revoking a cert, there are a few ways, but none of them are fully reliable. This works by having revocation list endpoints that list all the revoked certificates. Which is why you should already be fine if you are using a desktop browser(mobile could still be outdated). But for IoT devices, they tend to both not check the revocation lists, and not get updates to remove the compromised root. As a result we might have issues with this for a long time.

This is also why there has been a big push to have short expiry times for certificates in the industry for multiple years now. Because with shorter lifetimes, the open window for using a compromised certificate is limited.

  • source
  • parent
  • context
  • [–] 22 points 4 months ago (4 children)

    1 office chair has 5 wheels. Almost every home has at least 1 office chair. And if we look at hospitals then it gets even worse because there are a lot of the beds have wheels.

    And then we can go even further. A lot of curtains use rollers which are wheels. So if I just look at my apartment, I probably have 15-20 doors(cabinet doors, etc. but a lot of the normal doors are sliding doors which use wheels) and probably 50-100 wheels. And that is probably undercounting the wheels that are there by a lot.

  • source
  • parent
  • context
  • [–] 21 points 6 months ago (1 child)

    Except that it has been found in the past that Google/YouTube has been serving different html to Firefox than to Chrome. If they would be serving the same html, then you might have a point. But even then, Google can push through non standard changes to both chrome and YouTube before Firefox even has had a chance of making it compatible.

  • source
  • parent
  • context
  • [–] 4 points 10 months ago (3 children)

    I think it is because short form texts like IMs/SMS/irc are more like spoken language than written language. And if somebody talks to you and ends a sentence with "period", the meaning/feeling of the sentence changes.

  • source
  • parent
  • context
  • [–] 1 point 11 months ago

    I also remember something like it around that time. There were definitely a few YouTubers playing it against eachother. Iirc you could see all the other player viewpoints, but not your own.

  • source
  • parent
  • context
  • [–] 37 points 11 months ago (1 child)

    The characters for Japan literally mean sun and origin. And has been in use since the 8th century. So the Mercator projection has nothing to do with that. The origin of "land of the rising sun" is because Japan is East of China and the sun rises in the east.

  • source
  • parent
  • context
  • [–] 13 points 1 year ago (1 child)

    Not really understand the point you are trying to make. This post is about communities on dead instances. Dead as in the host has stopped hosting it. Those communities will not ever federate again. So if you post in such a community from your own instance, it will not federate to other servers. It also causes issues with moderation.

    Most of the communities on those dead instances have moved to other instances. And people should use those instead of trying to use the dead instance community.

  • source
  • parent
  • context