Great. The technology has progressed enough to kill the existing technologies. It's like the fish in a pool creating a shark that eats away all the fish while the fish proudly announce that their great creation (shark) as the frontier progress for their fish race.

▲

cedilla 5 hours ago | parent | next [-]

Here a CA derived a secret key from the number 4.

If you think "that's weird to see such a small number in key generation" than you're one step ahead of whoever generated that key.

Unfortunately, unlike with RSA, small primes are not apparent in elliptic cryptography.

▲

GreenWatermelon 3 hours ago | parent | next [-]

Oh my God it's literally this XKCD https://xkcd.com/221/

	▲	shagie an hour ago \| parent [-]
		They should have upgraded to 5 (see today's xkcd alt text https://xkcd.com/3314/ )

▲

jkahrs595 3 hours ago | parent | prev | next [-]

> Here a CA derived a secret key from the number 4

https://xkcd.com/221/

▲

cobychapple 2 hours ago | parent | prev | next [-]

RFC 1149.5 FTW

▲

wiredfool 4 hours ago | parent | prev [-]

Nor small composites, apparently.

▲

colinmarc 5 hours ago | parent | prev | next [-]

The eMudhra CA compromises had nothing to do with LLMs? But I love the vibes.

▲

prodigycorp 4 hours ago | parent [-]

Agents have dramatically increased the ability to poke at every single surface out there. I would be surprised if the researcher who found this wasn't assisted by a llm.

▲

renhanxue 3 hours ago | parent [-]

The researcher in question has publicly stated[0] that he wanted to try Google's paranoid_crypto tool[1], so he ran it on some roots as a quick proof-of-concept, and the first thing that happened was that it detected these intermediates. He also states he's been running a lot of certificate linters so this was just the next logical step I guess.

[0]: https://groups.google.com/a/mozilla.org/g/dev-security-polic...

[1]: https://github.com/google/paranoid_crypto

	▲	Sophira 2 hours ago \| parent [-]
		That was an enlightening read. I find it incredible that apparently Google themselves don't use the existing corpus of certificates as a test for paranoid_crypto.

▲

palata 4 hours ago | parent | prev | next [-]

> It's like the fish in a pool creating a shark

What a weird comparison...

▲

RazorX 4 hours ago | parent | prev | next [-]

This is basically the whole idea of the novel War with the Newts

▲

valeg an hour ago | parent | prev | next [-]

Create the problem, sell the solution

▲

gilrain 2 hours ago | parent | prev [-]

What are you talking about?