this post was submitted on 20 Oct 2026
970 points (99.7% liked)

Technology

88987 readers
2907 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
 

Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237.

exploiting compromised certificates requires an active adversary-in-the-middle attack, meaning the attacker must act as a proxy between two TLS parties and receive encrypted traffic, decrypt it, reencrypt it, and send it to the other party. Such capabilities, in some cases, are usually limited to only the most well-resourced attackers. People with control of a local network—at a coffee shop, university, or other organization—face much less of a challenge.

https://emudhra.we-have-a-problem.com/

Xkcd 221: int getRandomNumber() { return 4; // chosen by fair dice roll. guaranteed to be random. }

(page 3) 50 comments
sorted by: hot top controversial new old
[–] RedGreenBlue@lemmy.zip 11 points 2 days ago* (last edited 2 days ago)

Fennec and other Firefox forks: Put

about:config

in address bar and search for

security.enterprise_roots.enabled

Toggle it to True

If your android cert store is good, you will be good for now. Test it

[–] Azazel@lemmy.ml 6 points 2 days ago (2 children)

Why would this put vpn users at risk if browsers have already blocked the problematic certs?

[–] Aatube@lemmy.dbzer0.com 5 points 1 day ago* (last edited 1 day ago) (2 children)

it would put VPN users at risk if browsers had not blocked it or updated enough and the VPN provider chooses to do shenanigans, that’s why security patches patch the security and why it it’s important to patch this security issue

load more comments (2 replies)
load more comments (1 replies)
load more comments
view more: ‹ prev next ›