2:14:45The 4 thing is a master key from a cert authority
2:14:46the 4 thing is a certificate authority thing
2:14:47yeah, the php vuln is brutal, i spent all day today patching servers
2:14:48Nah it’s more like the lock is made out of paper
2:14:51theres like 3 major security events today actually
2:14:51The private keys for a bunch of certs were just a single digit
2:14:52A fair number of people discovered it, individually, actually. And yes, the CA thing is different. There are like 12 severe vulnerabilities this month.
2:14:55Yeah, that was a separate thing
2:15:03No it was India private key that was 4
2:15:03tl;dr they set the IV for their private key with "4"
2:15:03i dont remember the third one
2:15:04Yeah it’s multiple things happening at the same time
2:15:05Indian certs were weak and you could masq as any website
2:15:05:_jellyJoy:they had 4 as their private key or something absurd
2:15:05Its a master key for a cert authority which is used for website security
2:15:08ssl certificate authority in india used "4" as the key
2:15:09It was a private key for web cartificates
2:15:12the private key was 4, they used an 8-bit random number for an intermediate cert
2:15:14A certificate authorities private key had a value of 4, most bits in their private key being 0.
2:15:22or maybe it was literally the private key was just 4