14 comments

  • TazeTSchnitzel 3 minutes ago

    Could HN start feeding submissions through Pangram so us human readers don't have to suffer with reading the nauseating AI-prose?

  • jlmorton 11 minutes ago

    In retrospect, having 100 trusted certificate authorities might have been excessive.

  • WalterGR 17 minutes ago

    Related: https://news.ycombinator.com/item?id=50166579

    “eMudhra intermediate CA compromise” | 947 points | 19 hours ago | 408 comments

  • bombcar 20 minutes ago

    Of COURSE it's easy to crack, 4 isn't even prime!

      joshuat 16 minutes ago

      It’s really impressive no one caught their three previous private key values

        bcvvvy 9 minutes ago

        I suspect they did but it wasn't publicised.

  • positive-spite 30 minutes ago

    That's some criminal negligence right there.

    8 bits is crazytalk!

      joshuat 16 minutes ago

      “4”

      hey chatgbg what is a “private key”

  • siwatanejo 4 minutes ago
  • Qision 14 minutes ago

    It feels like they chose the private keys by hand.

      PalmPilotProMax 8 minutes ago

      Artisanal cryptography. Hand-picked private keys salted with organically sourced nonces.

  • maeln 9 minutes ago

    eMudhra explanation : https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c11

    Kind of hard to understand how a bug would have generated a second pair of key so bad, and how would human would have ended up using them. Never attribute to malice what can be attributed to stupidity, but sometimes you wonder.

  • naabozaurus 11 minutes ago

    hey, at least it was easy to remember...