is pretending you aren't in the other community, including having talked there today, and are oh so missing everyone an attempt at a psyop or something?
8 eMudhra (Certificate Authority) private keys, which were outrageously all numbers less than 4 digits long, were compromised- meaning that besides softwares blocking/blacklisting those certificates, every non-patched software will trust them and that will allow any malicious IP to pretend to be any website (?)
so like, if your method of connecting to the internet has not patched it, your software might think the IP it is connecting is definitely, certificate verified, the official website/api/whatever of your bank, and show you that and trust that - but it's not, it's a malicious IP
> Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237.
...
A normal size for one of these private keys is 116 decimal digits.... not 1, 2 and 3 digits long
> At this early stage, the most immediate threat appears to be for those using VPNs, especially in countries with governments likely to maliciously intercept traffic. There are likely many other cases for concern. End users largely have no recourse other than to hold off using many non-browser forms of TLS communication until they receive assurances updates are in place.
Microsoft Edge has since been updated (and allegedly Windows itself).
I was mistaken, the keys were not leaked on the 17th, they were reported privately to Mozilla on the 17th.
The fact the keys were compromised was disclosed publicly by Mozilla today- so most patches are from today.
The website (https://emudhra.we-have-a-problem.com/#check) shows if your browser version is vulnerable at least. Not sure what impact Windows' update has, considering my version of Edge is still vulnerable...
I mostly create D&D and fantasy artwork including character illustrations, maps, environments and custom character designs. I’m a versatile artist so I can work on different styles and types of projects too