this post was submitted on 20 Oct 2026
967 points (99.7% liked)

Technology

88987 readers
2925 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
967
The Internet goes on high alert after discovery of 8 compromised TLS certs (arstechnica.com)
submitted 2 days ago* (last edited 2 days ago) by Aatube@lemmy.dbzer0.com to c/technology@lemmy.world
194 comments fedilink hide all child comments
 

Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237.

exploiting compromised certificates requires an active adversary-in-the-middle attack, meaning the attacker must act as a proxy between two TLS parties and receive encrypted traffic, decrypt it, reencrypt it, and send it to the other party. Such capabilities, in some cases, are usually limited to only the most well-resourced attackers. People with control of a local network—at a coffee shop, university, or other organization—face much less of a challenge.

https://emudhra.we-have-a-problem.com/

Xkcd 221: int getRandomNumber() { return 4; // chosen by fair dice roll. guaranteed to be random. }

you are viewing a single comment's thread
view the rest of the comments
[–] thisbenzingring@lemmy.today 264 points 1 day ago* (last edited 1 day ago) (19 children)

I think that this isn't really getting the right attention, about what a massive WTF situation this is...

its a 384 bit certificate and this is the private key

00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:
00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:
00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:
00:00:04

that is just fucking NUTS

[–] Blackmist@feddit.uk 9 points 1 day ago* (last edited 1 day ago) (5 children) 
4E:65:76:65:72:20:67:6F:6E:6E:61:20:67:69:76:
65:20:79:6F:75:20:75:70:20:4E:65:76:65:72:20:
67:6F:6E:6E:61:20:6C:65:74:20:79:6F:75:20:64:
6F:77:6E

is much more secure.

[–] not@lemmy.dbzer0.com 9 points 1 day ago (4 children)

LOL, People are never gonna give this up.

[–] sonoro@lemmy.world 2 points 17 hours ago* (last edited 17 hours ago)

"Never gonna give you up never gonna let you down "

load more comments (3 replies)
load more comments (3 replies)
load more comments (16 replies)