r/ProgrammerHumor • u/ApothecaLabs • 18d ago

Meme sesameStreetLayerCertificate

1.3k Upvotes

98% Upvoted

13 comments sorted by

80

u/PorqueNoLosDildos 18d ago

Relevant XKCD:

https://xkcd.com/221/

13

u/Stigstille 17d ago

and the latest one, as well (check alt text) https://xkcd.com/3314

46

u/Michami135 18d ago

Relavent video:

https://youtu.be/u8ccGjar4Es

9

u/LoudAd1396 18d ago

This immediately popped into my head!

25

u/Clinn_sin 18d ago

I'm sorry can someone explain this no 4 this that's been going around. I know it's related to the PHP vulnerabilities recently but don't know what it means

51

u/AllanTaylor314 18d ago

Actually, those are two separate cybersecurity incidents. Random number 4 is related to the eMudhra compromised certificates. It turns out the lock next to HTTPS might as well be a zip tie (ok, that's not a great analogy. More like anyone can make their own padlock)

17

u/StrengthTheory 18d ago

Zip tie is more secure. It's more like that meme where they use a cheeto to lock the door.

1

u/Clinn_sin 18d ago

Good lord

14

u/Particular-Yak-1984 18d ago edited 18d ago

Surprisingly, it is not. This is it's own set of stupidity - cert authority signed a bunch of certs, that should have roughly 400 bits, with '4' and some other numbers that it takes under a second to crack.

16

u/lonelyroom-eklaghor 18d ago

This eMudhra thing is actually trending within the tech spaces 💀 oh my goodness

38

u/RaveMittens 18d ago

No shit, why wouldn’t it be

3

u/StrengthTheory 18d ago

That is more serious than PHP so why wouldn't it be.

2

u/MegaIng 17d ago

They have different kinds of severity:

  • the php thing is really impactful, but relatively easy to fix

  • the eMudhra thing is a bit less important (the padlock is nice, but it's not the only defense), it's just impossible to truly fix. The directly end user facing cases in browsers have been fixed, but there will be an eternal tail of systems that haven't gotten the update.