me: "I think my opsec could be better, i'm probably below average"
the industrial accident of a certificate authority: "our private key is 4"
me: "I think my opsec could be better, i'm probably below average"
the industrial accident of a certificate authority: "our private key is 4"
@cult Disregarding the context, I think this might be funny to quantum field theorists as well.
@cult That's the private key an idiot has on their luggage!
@kentenmakto @cult omg
"4 digits?" "No, literally just the number 4."
@pedro_mateus @cult I just had this conversation with my wife, she said "like… 1234?"
@cult NO ONE WILL SUSPECT: FOUR!
@cult but they’re audited! they have the certificates (lol) to prove it!
@cult Security Through Stupidity: the act of being so incompetent that your vulnerabilities are too dumb for attackers to consider
@cult @chickfilla Valid
@cult but do you do YOLO-Ops like this?
“The CRL's were signed with the original private keys (which were supposed to be the correct keys with appropriate entropy) but given that this resulted in incorrect signatures, they were resigned with flawed keys.”
@cult you know what they say; quality over quantity