"You guys are stupid, they're gonna be looking for 256 bit security keys."

Comments

• SexualPolytope@lemmy.sdf.org ⁨45⁩ ⁨minutes⁩ ago

  And here I am, thinking about bits of entropy for my toy project’s API access.

  source
• snoons@lemmy.ca ⁨5⁩ ⁨hours⁩ ago

  Can someone please explain to me what 4 has to do with the PHP security thingymajiger lol

  source

  • mkwt@lemmy.world ⁨5⁩ ⁨hours⁩ ago

    It’s a different thingymajigger.

    One of the orgs that does TLS infrastructure was found to have used 4, a number from Sesame Street, as a private key on a TLS cert that was used to sign other certs.

    source

    • CainTheLongshot@lemmy.world ⁨57⁩ ⁨minutes⁩ ago

      Psychostick - I Can Only Count To For

      source
    • marcos@lemmy.world ⁨5⁩ ⁨hours⁩ ago

      Just to add. Those private keys are a 85 to 170 digits random number.

      A very central company whose security the entire internet depends on picked 00000000000…0000004.

      source

      • -> View More Comments
  • Hudell@lemmy.dbzer0.com ⁨5⁩ ⁨hours⁩ ago

    Imagine a big stamp. Anything stamped with it, the internet in general trusts. Because we all trust that nobody knows how to stamp things like that big stamp. Except instead of a literal stamp, it’s a secret combination of numbers and letters that works like a password. It now turns out that this secret combination of numbers and letters was just the number 4.

    source

    • panda_abyss@lemmy.ca ⁨5⁩ ⁨hours⁩ ago

      My favourite analogy on this is that they had a master key with 398 slots for bumps, and they decided to only use one notch/bump for the whole thing.

      You can’t open that with most regular keys, but if you try the most basic of picking you’ll find it pretty quick.

      source
• EpeeGnome@feddit.online ⁨3⁩ ⁨hours⁩ ago

  I mean, I assume it had the correct number of bits in it, it’s just that all but the 3rd least significant bit were all 0s.

  source
• aeronmelon@lemmy.world ⁨4⁩ ⁨hours⁩ ago

  sigh This isn’t going away anytime soon, is it? :)

  source

  • SpaceNoodle@lemmy.world ⁨2⁩ ⁨hours⁩ ago

    It’s gonna be around 4 the 4seeable future.

    source