Conversation

Then the weak-key incident. Mozilla sent questions on 20 Oct and asked for a first response within 24 hours. eMudhra asked for 24 more. Last we checked, still nothing no concrete evidence has been furnished.

The reason given: scrutiny made analysis “pretty much impossible”. Chrome’s reply: scrutiny is the predictable cost of the failure, not a reason to wait.

Contain, preserve evidence, answer. In parallel, not in sequence.

TELL 3: Answers to a different question.

“No network breach.” The keys were guessable, not stolen.
“Passed two independent audits.” Which ceremony was in scope?
“Possibly AI-assisted.” The values were below 256. That’s a for-loop.
None need be false to be beside the point.