4 times the SECP384-R1 base point is (0x138251cd52ac9298c1c8aad977321deb97e709bd0b4ca0aca55dc8ad51dcfc9d1589a1597e3a5120e1efd631c63e1835, 0xcacae29869a62e1631e8a28181ab56616dc45d918abc09f3ab0e63cf792aa4dced7387be37bba569549f1c02b270ed67)

https://repository.emsign.com/certs/EMOVTLSCAG3C.crt

for the non-cryptographers at the back of the room: the private key is 4, just the number 4, nothing more

Certificate:
    Data:
        Version: 3 (0x2)
        Issuer: C=IN, O=eMudhra Technologies Limited, CN=emSign Root TLS CA - G3
        Subject: C=US, O=eMudhra Inc, CN=EM OV TLS CA - G3C
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub:
04:13:82:51:cd:52:ac:92:98:c1:c8:aa:d9:77:32:
1d:eb:97:e7:09:bd:0b:4c:a0:ac:a5:5d:c8:ad:51:
dc:fc:9d:15:89:a1:59:7e:3a:51:20:e1:ef:d6:31:
c6:3e:18:35:ca:ca:e2:98:69:a6:2e:16:31:e8:a2:
81:81:ab:56:61:6d:c4:5d:91:8a:bc:09:f3:ab:0e:
63:cf:79:2a:a4:dc:ed:73:87:be:37:bb:a5:69:54:
9f:1c:02:b2:70:ed:67
                ASN1 OID: secp384r1
                NIST CURVE: P-384

I'm already in bed pwease no hacky until tmrw morn

MY NEXTCLOUD

I don't think I have any servers that run PHP
I can check my nginx files but they're all just reverse proxies to servers behind docker containers so I wouldn't be able to tell probably

what's going on with GitHub lmao what do you mean "this Oct 30, 2025"

wait is there actually a PHP CVE
is that unrelated to 4

RE: https://defcon.social/@thedarktangent/117476585463534293

I didn't know torrents were so good they came out with a torrents 2

oh. right

adjika is p good on eggs
guess I should have still salted the eggs tho

You Can See a Limited Amount Of Things

I'm not really sure how to block a particular sender from sending me email
I actually know where to find information about block a particular address from even delivering email to my personal postfix mail server but alas this is a university email

I keep getting emails from this one particular predatory journal
actually I don't know if they're predatory but it's definitely spam

this is so funny ill be honest. after months of stupid CVEs seven times a fucking day for every piece of software under the sun because every asshole who has access to a bug bounty program got access to LLMs at once, this one being just "hey the key is 4 actually" is so good

I think the equivalent would be me with a Heated Rivalry wallpaper. not one of the sex scenes, but also nothing as chaste as a hockey game screenshot

if it's socially acceptable to have scantily clad anime girls as your desktop wallpaper in the office does that mean I can have hot shirtless men on mine

@ionchy a root CA (a thing that somehow exists) generated several keys with exactly one byte of entropy (it is believed somehow the output of their hardware security module was truncated to one byte and then zero-padded to 32 bytes, which is a fucking ridiculous thing to say) and one of those one-byte values is 4. so you could plug 4 into an elliptic curve and present a TLS cert valid for the whole internet, which is a thing the internet was constructed to allow

During the third year of doctoral studies, students must assemble a thesis committee

THIRD year?? I was supposed to do this two years ago??

why is 4 the new funny number

scientists reveal the 4