4 has escaped containment and is being discussed in my city's subreddit, much to the confusion of non-tech folks.
XFEDI
ActivityPubRemote profile
Rob O :verified:
Teaching faculty. Security researcher. Red team, DevOps, AppSec. An academic but not an academic. nerdprof @ Twitter
Open remote profile ↗Posts
Good morning (*checks the PHP vuln details*) and may the odds be ever in your favor.
Is "4" going to be our "67"?
PHP, TLS... I swear, if if I see one [.]./ tonight... I need to be grading my web security midterms.
(Incidentally, one of the questions was literally what to do if your intermediate CA's signing cert gets compromised.)
RE: https://hachyderm.io/@molly0xfff/117475727199534633
Suddenly, Deep Thought's answer of 42 from Hitchhiker's Guide to the Galaxy might make just a little more sense.
truly a wild time to be alive when the cryptography world is split between those worried about quantum computers and those whose private key is “4” http://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/ #eMudhra
Hachyderm.ioMolly White (@[email protected])truly a wild time to be alive when the cryptography world is split between those worried about quantum computers and those whose private key is “4” http://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/ #eMudhraRE: https://abyssdomain.expert/@filippo/117473395742791531
This was literally a question on my midterm exam last week.
THIS IS NOT A DRILL. If you package/distribute/maintain root stores or chain verifiers, act immediately. If you know how to remove trust in a root, consider doing it now. Otherwise, prepare to update systems as patches/mitigations come. Go users, update to Go 1.27.3 or Go 1.26.10
MastodonFilippo Valsorda (@[email protected])THIS IS NOT A DRILL. If you package/distribute/maintain root stores or chain verifiers, act immediately. If you know how to remove trust in a root, consider doing it now. Otherwise, prepare to update systems as patches/mitigations come. Go users, update to Go 1.27.3 or Go 1.26.10. https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJThis probably goes without saying, but it likely isn't hard to guess the topic.
Achievement unlocked: using malarkey and codswallop in a meeting.