18 months, someone had to have figured it out before this week. Be careful if you thought your VPN was good.
It worked until it didn’t, success!
Unless it didn’t, but there’s no way to know!
I don’t understand
The entire Internet went into panic mode yesterday because someone used 4 as their password.
Worse–private key allowing forged https certs.
Not just 4, but for eight things they used numbers under 300
And to be clear, that’s a 384 bit key, so the key was just 381 zeroes in a row, then a 1, then two more zeroes.
Or, with using regular decimal numbers, imagine a combination lock where the code is 115 digits long, and the first 114 are just zero, with a 4 at the end.
Just as xkcd predicted
https://xkcd.com/221/tom7 is our true pioneer, his HTTPV made encryption completely insecure more cleverly. eMudhra’s approach of “just use a really weak key” is a bit boring in my mind! https://www.youtube.com/watch?v=M1si1y5lvkk
wait he went to SIGBOVIK?
i don’t know what that means but y’all get all the cool conference names
https://sigbovik.org/ SIGBOVIK is a joke conference!
Dude I knew I got scooped, but to find out it was Evan? I will retire from flat earth science
Evan? who is that?
Published in 2007, nice.
I wish it was 7 instead. Could have played a Bowie track.
In a world where absolutely every password needs 8 digits, a Capital, a number, and a special character, “clown” is the most secure password because no one would try it.
If you’re brute forcing, you always do a dictionary attack first because it’s fast and someone will get hit.
i dunno, I&Need&TP&4&My&BungHole is full of dictionaries but it feels pretty secure. who watches beavis and butthead anymore anyways
modern problems require modern solutions
