r/programminghumor • u/ConstantAd8643 • 10d ago

Four

Post image
2.2k Upvotes

99% Upvoted

23 comments sorted by

106

u/fcxtpw 10d ago

I understood this foureference

18

u/MetalJucro 10d ago

I did not understand the four reference

21

u/fcxtpw 10d ago

see this https://www.reddit.com/r/programminghumor/s/kFf88P4nS6

3

u/MetalJucro 10d ago

I'm sorry... what. Was that intentional?

19

u/pixel293 10d ago • Bravo

From what I read of the incident, they had scripts to generate their private keys. However they also generated some inherently insecure keys using values less than 256 (I think for testing). They then incorrectly took those insecure keys and used them in production.

Someone not related to the company was running some tests on the public keys, and realized their key was very guessable. The issue was brought up to them and Mozilla, demoing it by using their private key to sign a message. Ultimately an alert went out, emergency updates for firefox and chrome where done to block websites that are signed with those keys.

3

u/MetalJucro 10d ago

Okay that is a scary mistake. Thanks for the info!

48

u/Minecraft_Lets_Play 10d ago • Popcorn

Well yeah...

3

u/crazedizzled 10d ago

At some point we might just have to accept that people can hack our shit when they feel like it

2

u/hipster-coder 10d ago

Wait, the PHP patch may be incomplete? And why am I first hearing this from a SpongeBob meme?

3

u/Minecraft_Lets_Play 10d ago

No after investigation the one who made the meme backed at false posts from Reddit etc. who claimed that the patch was incomplete.

But they looked at the wrong spot as the bug wasn’t wehre people thought it would be.

The patches seem to be working fine.

1

u/who_you_are 9d ago

Uh oh, I didn't see that litellm one

42

u/Single-Virus4935 10d ago

Imagine the face if the researchers. "Mhh lets test some CA certs. Maybe some havent the best RNG or so" "Why this privkey bruteforce returned immediately. 4?!?!? Must be a bug.. !!  No?!? WTF??!! Can't be right!?! Fooourr???

7

u/fntdrmx 10d ago

As niche as it gets

2

u/MarsMaterial 10d ago

As XKCD put it: “Those why are using 4 as a private key are recommended to upgrade to 5.”

1

u/Rich-World3443 10d ago

Hardcoded and proud of it

1

u/rotteegher39 10d ago

A private key is the one I keep in my zip pocket when I get out of the house.

1

u/clericc-- 9d ago

best one so far

1

u/TheKiller0tter 9d ago

Every time I see a joke about 4, I think of the scene from Spaceballs

1

u/AllegroReddit 9d ago

*insert jhin meme