friendica (DFRN) - Link to source

Looks like this is who discovered that the #eMudhra TLS generation seeds were indeed a single byte long, and one of them was the infamous number 4 from the #xkcd scenario. What sort of misconfiguration led to this?!

ira grachevskaya from the hit vn Z.A.T.O. // I Love the World and Everything In It

2026-10-20 16:38:18

mastodon - Link to source

omfg they're ALL FUCKING <255

4 EM OV TLS CA - G3C OV TLS
56 EM EV TLS CA - G3C EV TLS
66 EM OV CS CA - G3B Code signing
115 EM EV TLS CA - G3B EV TLS
155 EM OV TLS CA - G3B OV TLS
156 EM DV TLS CA - G3B DV TLS
230 EM DV TLS CA - G3C DV TLS
237 EM OV CS CA - G3C Code signing


#xkcd #emudhra

Death by Lambda reshared this.

friendica (DFRN) - Link to source

Turns out that Randall Munroe predicted this exact scenario, down to the number, thirteen years ago. There's a #xkcd for everything indeed. xkcd.com/221/ #eMudhra

Random Number

xkcd

Carlos Solís

2026-10-20 18:25:11

friendica - Link to source

Rumor has it that #eMudhra 's password to their encryption keys was A SINGLE DIGIT LONG. Again, you had ONE JOB-

♲ @csolisr@hub.azkware.net:

To the #eMudhra company, you had ONE JOB
Screenshot of eMudhra's website. Text: "eMudhra was started in 2008 with a mission to accelerate the world's transition to a secure integrated digital society with a foundation built on digital identity and trust. Employees, customers and vendors increasingly demand real time and secure interactions, be it for onboarding, availing a loan, signing a contract or making payments online." Picture: stock photograph of an office lady typing on a computer.



#xkcd #emudhra
friendica (DFRN) - Link to source

Rumor has it that #eMudhra 's password to their encryption keys was A SINGLE DIGIT LONG. Again, you had ONE JOB-

Carlos Solís

2026-10-20 16:48:31

friendica - Link to source

To the #eMudhra company, you had ONE JOB
Screenshot of eMudhra's website. Text: "eMudhra was started in 2008 with a mission to accelerate the world's transition to a secure integrated digital society with a foundation built on digital identity and trust. Employees, customers and vendors increasingly demand real time and secure interactions, be it for onboarding, availing a loan, signing a contract or making payments online." Picture: stock photograph of an office lady typing on a computer.

#emudhra
in reply to Carlos Solís
friendica (DFRN) - Link to source

Carlos Solís

Better yet - a way to confirm it from your own device: chaos.social/@fluepke/117474156947559280

Flüpke

2026-10-20 16:23:01

mastodon - Link to source

The private key (D) is 4.
No joke.

Verification:

openssl pkey -in key.pem -pubout -outform DER | openssl dgst -sha256
openssl x509 -in cert.pem -pubkey -noout | openssl pkey -pubin -outform DER | openssl dgst -sha256


friendica (DFRN) - Link to source
To the #eMudhra company, you had ONE JOB
Screenshot of eMudhra's website. Text: "eMudhra was started in 2008 with a mission to accelerate the world's transition to a secure integrated digital society with a foundation built on digital identity and trust. Employees, customers and vendors increasingly demand real time and secure interactions, be it for onboarding, availing a loan, signing a contract or making payments online." Picture: stock photograph of an office lady typing on a computer.
#emudhra