Toon Link :verified:ToonLink@fandom.ink
Oct 23, 2026, 1:43 AM@davidrevoy Is this that PHP thing everyone's been talking about, or has there been *another* one? :blobcatfearful:
Replies
Damian YerrickPinoBatch@peoplemaking.gamesOct 23, 2026, 2:18 AM@ToonLink @davidrevoy 4 and the PHP RCE thing are separate. 4 was part of a weak private key in an intermediate certificate of the Indian CA eMudhra.
https://en.wikipedia.org/wiki/EMudhra#2026_intermediate_certificate_compromise- Toon Link :verified:ToonLink@fandom.inkOct 23, 2026, 2:19 AM
@PinoBatch Good gravy. These sure are interesting times. Thank you!
Jaime Herazojherazob@mastodon.ieOct 23, 2026, 8:05 AM@ToonLink @davidrevoy
A certificate authority was disavowed everywhere, when people dug in for the reasons it was found that the passwords for the cert were small numbers, including JUST THE NUMBER 4!
Voxelvoxel@infosec.spaceOct 24, 2026, 3:00 AM@ToonLink @davidrevoy Another one. /srs