Lemmy Shitpost
Welcome to Lemmy Shitpost. Here you can shitpost to your hearts content.
Anything and everything goes. Memes, Jokes, Vents and Banter. Though we still have to comply with lemmy.world instance rules. So behave!
Rules:
1. Be Respectful
Refrain from using harmful language pertaining to a protected characteristic: e.g. race, gender, sexuality, disability or religion.
Refrain from being argumentative when responding or commenting to posts/replies. Personal attacks are not welcome here.
...
2. No Illegal Content
Content that violates the law. Any post/comment found to be in breach of common law will be removed and given to the authorities if required.
That means:
-No promoting violence/threats against any individuals
-No CSA content or Revenge Porn
-No sharing private/personal information (Doxxing)
...
3. No Spam
Posting the same post, no matter the intent is against the rules.
-If you have posted content, please refrain from re-posting said content within this community.
-Do not spam posts with intent to harass, annoy, bully, advertise, scam or harm this community.
-No posting Scams/Advertisements/Phishing Links/IP Grabbers
-No Bots, Bots will be banned from the community.
...
4. No Porn/Explicit
Content
-Do not post explicit content. Lemmy.World is not the instance for NSFW content.
-Do not post Gore or Shock Content.
...
5. No Enciting Harassment,
Brigading, Doxxing or Witch Hunts
-Do not Brigade other Communities
-No calls to action against other communities/users within Lemmy or outside of Lemmy.
-No Witch Hunts against users/communities.
-No content that harasses members within or outside of the community.
...
6. NSFW should be behind NSFW tags.
-Content that is NSFW should be behind NSFW tags.
-Content that might be distressing should be kept behind NSFW tags.
...
If you see content that is a breach of the rules, please flag and report the comment and a moderator will take action where they can.
Also check out:
Partnered Communities:
1.Memes
10.LinuxMemes (Linux themed memes)
Reach out to
All communities included on the sidebar are to be made in compliance with the instance rules. Striker
view the rest of the comments
What's this a reference to?
https://www.theregister.com/security/2026/10/20/indian-certification-authority-emudhras-private-keys-compromised-one-of-them-was-the-number-4/5304312
It was discovered that one of India's Trusted Certificate Authorities, eMudhra, tasked with signing website certificates to verify authenticity of HTTP traffic was using the number "4" as the signing key along with 7 other keys less than 250. The key is supposed to be a unique number hundreds of binary digits long, but with such a simple key anybody can spoof a certificate that they could claim was signed by eMudhra and CA-checking lists would accept that.
At least use a GUID generator website to generate it like the rest of us.
00000000000000004
Nerd alert!
You got a lot of downvote for this, lol.
stupid smelly nerds!
Nickname checks out!
4 has been breached. Update your browsers! We are using 5 now :)
I'm using 8. It's twice as secure
We can't afford the computational overhead of 8! Help plz
Use 0.8 rounded. Is the new lightweight model.
How do I begin? Basically, an India based company that does TLS certification published some comically bad private keys. One of which was just the character 4. Update all of your browsers btw, desktop and mobile. This is a very major low level security breech of the entire internet.
It may take Linux distros days to patch it, and this includes millions of servers.
Firefox, likely Chrome, and maybe other major browsers update certificate revocations independently of the main app. Things are more complicated with various command-line apps and daemons, programming languages and libraries, which may require updates to system-wide packages or, worse, libraries for individual programs (ahem Python).
Also, private keys aren't published, that's their defining characteristic. Public keys are published, and of course they are used to check signatures made with particular private keys — in this case the ones generated by the security researcher.
An ssl certificate provider used 4 as their private key. This should be hundreds of characters long. Somebody figured this out and was able to issue their own certificates based on it. This results in loss of trust in their certificates which is a big deal.
It is compared as bigger than one of the largest security issues in IT the last couple of years since it forces everybody to patch their shit to not trust this certificate chain. And lots of stuff aren't patched that easily.
I bet they used 0000000000…004
See, hundreds of digits long!
I mean …. Yes, that would be secure.
Sorta.
It’s be dumb, and a pattern based attack could potentially solve it easily … but technically much more secure than
4I get what you mean, but no, it would not be secure. The private key in question is really used as a number in a calculation, not as a string of digits. Leading zeroes would just be ignored.
not when it’s a representation of bits in a file
The key itself being 00000000004 yah
The key file being
0000000000000000000000…..4 is a different story
eMudhra, an Indian tech firm, had a root TLS cert with laughably low size for one of its encryption keys https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
4
A company from India was issuing Internet security certificates with extremely small private keys. The lowest they issued was 4