Oh my!
Sars, do not revoke!
>one of the keys was literally the number 4 (zero extended to 48 bytes)xkcd keeps winning. https://xkcd.com/221/
>>110122506>xkcd keeps winning.faggot redditoryou're probably a jeet too
>>110122482i dont use ssl
>>110122594fucking retardhttps://github.com/Fluepke/emudrahahahahaha/blob/main/CN%3DEM%20OV%20TLS%20CA%20-%20G3C%2CO%3DeMudhra%20Inc%2CC%3DUS.keyread EC keyPrivate-Key: (384 bit)priv: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00: 00:00:04pub: 04:13:82:51:cd:52:ac:92:98:c1:c8:aa:d9:77:32: 1d:eb:97:e7:09:bd:0b:4c:a0:ac:a5:5d:c8:ad:51: dc:fc:9d:15:89:a1:59:7e:3a:51:20:e1:ef:d6:31: c6:3e:18:35:ca:ca:e2:98:69:a6:2e:16:31:e8:a2: 81:81:ab:56:61:6d:c4:5d:91:8a:bc:09:f3:ab:0e: 63:cf:79:2a:a4:dc:ed:73:87:be:37:bb:a5:69:54: 9f:1c:02:b2:70:ed:67ASN1 OID: secp384r1NIST CURVE: P-384writing EC key
read EC keyPrivate-Key: (384 bit)priv: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00: 00:00:04pub: 04:13:82:51:cd:52:ac:92:98:c1:c8:aa:d9:77:32: 1d:eb:97:e7:09:bd:0b:4c:a0:ac:a5:5d:c8:ad:51: dc:fc:9d:15:89:a1:59:7e:3a:51:20:e1:ef:d6:31: c6:3e:18:35:ca:ca:e2:98:69:a6:2e:16:31:e8:a2: 81:81:ab:56:61:6d:c4:5d:91:8a:bc:09:f3:ab:0e: 63:cf:79:2a:a4:dc:ed:73:87:be:37:bb:a5:69:54: 9f:1c:02:b2:70:ed:67ASN1 OID: secp384r1NIST CURVE: P-384writing EC key
>>110122614The sysadmin should've padded it with full bytes then the haxxors would never break this scheme
>>110122594You are?
>>110122614This one just saddens me
DO NOT REVOKE SAAAAR
>>110122768>whose scalar D fits in one byte (bit lengths 3–8, nonzero)how the fuck did this even happen? did their RNG literally do & 255 or something?
I'm so glad that these very same people become CEOs of massive tech companies
>No fucking ca-certificate package updates yet for any of the major distrosCool, cool, cool. There goes my day.
>>110122891https://emudhra.we-have-a-problem.com/has the list of commands you can apply for now.
>eMudhraJust jeet things. Can we build a Great Firewall of India already?
>>110122506worse than that: they brute-forced the rest and they were ALL small single-byte integers! Most of the private keys were zero bytes.
>>110122818maybe they cast them to (char) instead of converting to a string (char [])
>>110123177Lol, they're in the Netherlands.Also, heads up, Node still hasn't patched npm yet.
>>110122614>>110122482>it's really easy to make an EC key, just stick random data in there!>saars just take a massive India shit into it and fuck everything up, as usualkek elliptic curve crypto was a mistake, it's only a viable option if you're not some brown fucking retard (these don't exist anymore because Whites are going extinct by choice)
Explain the problem in english.
>>110122614there is no fucking way
>>110122482uh oh
>>110123329They're not in the Netherlands Ranjeet
>>110122614How? How donyou even make openssl get that little entropy in a 381bit provate key?
Indian IT has been a disaster for the modern world. Can this part of hell he over now?
>>110122614THERE ARE FOUR NEEDFULS!
>>110122594reddit derangement syndrome
>>110122614> generate a random number> 4
>>110122482>>110122614We have to rangeban India from the internet and also stop any of them from coming to western/eastern countries
>>110122614this can't be real
>>110122482Ah cryptography, a window out of ignorance, did you take it?
not my problem now
I dont get how these CAs work. Doesn't this only affect you if you're indian?
>>110125296holy shit anon, time to log offthe absolute state of /g/ in 2026
So the glowy backdoor into nearly every system connected to the internet was just "4"?
>>110125465For the last 18 months, yep!
>>110122482>>110122614HAHAHAHAHAHAHA
>>110125473Yikes! Probably just an innocent mistake and won't ever happen again, right? :D
>>110125425That's not very nice nor was it an answer to my question.
>>110125465If backdoor, you mean validly signed trusted webpki cert that you could use to mitm systems not using cert pinning or CAA records that point to this weird jeet issuer? Sure.
>>110125484Well I bet someone is scanning a bunch right now.
>EmudhraImagine trusting jeets to do anything right lol
I'm Indian and I'm racially superior to all of you timmies.
>>110123307That's the combination on my luggage!
>>110122482>eMudhra Limited is an Indian digital trust servicesTrusting jeets. Who the fuck?
Why have we given such a serious responsibility to literally retarded people? They have an average IQ of fucking 76. Trusting them with this sort of stuff is beyond irresponsible.
What's your private key? 1?>...what? No?2?>It's 384 bits you dumbass. That's 35 orders of magnitude larger than the estimated number of atoms in the known universe....3?>[visibly sweating] Th-this is ridiculous...
>>110125668Next time some German speaks of the superiority of German technology, say this word:vier
>>110122491KEK
sirs we are back
>>110122482>indians break the internet againIndians should be banned from all important technological structures.
>>110126215Indians should be banned from the earth.
>>110122614I'm getting brain poop just by gazing at these results.
Hacker named 4chan strikes yet again!
>>110125964Indo-Aryans are R1a Slavs.Germans are R1b Bell Beaker/Slav mutts. Japheth.Hitler was a E1b1b Semite/Shem
I am done.
>>110125748The whole world did.
They heard "2^384", verbalized as "2 to 384" and thought that meant the keys had to be between 2 and 384.
>>110127130Unironically believable.
WAIT THEY VIBE CODED IT DIDN'T THEY
>>110122614you can't be racist towards what's not even human
>>110125498CAs are, by design, a backdoor. Did you sleep through the past 10 years?
It's not surprising when indians have been inserted into every facet of every society across the globe at this point, this is really just the tip of the iceberg. Every sector and every industry keeping society running now has a ticking time bomb in the form of incompetent 80 iq indians with fake university degrees being put into positions that they have zero qualifications for. It's a disaster of apocalyptic proportions waiting to happen.
>>110125935Kanzaki Nao moment in the roulette game lmao
>>110127246I always knew they were the biggest threat. And retards are whining about ruzzia and iran
>>110122614
MY DOMAIN IS ARYAN BRAHMIN SAAR, VERIFY IT NOW BLOODY BASTARD BENCHOD BITCH
>>110127246>>110127305The British Empire successfully used Indians as an intermediate, managerial class. They were obedient, easily placated, loyal, spoke English, and demanded low pay. There's a reason there are, or were, Indian populations scattered around their former empire, from Fiji to Uganda.The handlers of American capital are trying to tap into this same pool
>>110127130I believe this theory
>>110127171n-no of course not......I SAID NO MISTAKES SAAR I DID NOTHING WRONG
>>110127396Indians are divided into castes for a reason, with the higher castes resembling western people more and more, with the apex being literal aryans, I'm sure the middle management indians weren't the bottom 50%, this becomes a problem when you don't realize the vast majority of them are completely retards and you can at best only use the top 20%, mid to high castes for these tasks.
>>110127697Every Indian is a 65iq dalit.
>>110122506>XKCD>winningThat faggot isnt winning anything anytime.
>>110127171my HSM gives me a weak key warning (entropy detection) on every single key entry even if it's just a "test key" slot, this doesn't hold up to scrutiny
imagine trusting these retards with your postquantum migrationhttps://www.youtube.com/watch?v=FmNpvs2gtHMdo not redeem the coffee saarhttps://youtu.be/9RtdeJJXu4I?t=70
>>110127171This sounds like BS. Did nobody fucking look at the keys? You can look at it like with your eyes and see it's not okay. Or did they not verify its entropy before deploying?I don't know anything about HSMs but I would be surprised if they could generate 4 as a private key in any context.
>>110128230I bet they think any message besides success is evil so they deactivate or vibecode specifically to work withouut any error being shown, only successes.
>>110128230They could have legit generated the number 4 despite the astronomically low odds, but on a functional system this result would get rejected on a system level first and human second.Now multiply that by 8 because they did this for 8 keys.This whole "bug" narrative is accountability deflection.They legit thought P-384 means 1 to 384.
why the fuck does my devices has this streetshitter certificates. looks like it's a good time to cull'em by countries since i won't need them at all
>>110128246Doing that instead of saying hey boss this shit ain't working we need to fix it is very characteristic of Indian culture.I wouldn't even think they vibecoded it. It's easier to fuck up scripts like these when you write them manually at this point.>>110128265Exactly, even if they got these into their pipelines by mistake, other processes should have rejected it.
>>110128346>I wouldn't even think they vibecoded ityou better believe ithttps://bsky.app/profile/ketanjoshi.co/post/3myfu6elzgu22retards at microsoft are starting to push the narrative of "ackcyually, it's the white guys who vibecode, the saars and other minorities are the REAL programmers"
>>110122866Right? Totally cool using India as a back office for healthcare PHI, etc. No worries.
>>110128246An Indian at my last position got fired for exactly this, he turned off pipeline tests as soon as he was given repo admin.the Ops side of our devops team apparently trusted him too much, but luckily the quality gate check in the prod environment sounded the alarm when it checked the test output in the downstream repo, thank god he didn't have access to the prod environment repo
>>110128230every modern HSM that is worth a shit can detect low entropy keying, there's absolutely no way this would have made it to production unless they weren't using an HSM at all
day of the flush cant come soon enough
>>110128721you can bet your ass that if there was another jeet in charge of prod, he would have let it go on basis of saving costs in unnecesary checks
>>110123329Yeah I'd call the indian peninsula the nether lands
>>110128759my product owner/designer actually left because they started running a team in Pune, he went to a competitor with the single stipulation that he decides who works on the projectI left shortly after he bailed so not sure where they ended up but the problem with these corporations is that they don't fail fast enough because it takes time for the competent people to find new jobs or wake up to the fact that they are going to be the ones holding the bag when it comes to labor outputmy Indian detection loop is so sensitive now that I start looking even if I see Indian names in HR but not in the tech or other departments, because I know exactly what's going to happen in 6 monthsthe reason ram is 500% more expensive and the new Xbox is going to be $1800 is solely because Indians are in charge, and if you're a dumb enough goy to actually pay these prices to help enforce Indian-caused inflation, I guess you kind of deserve it
>>110122482what a bunch of mumbo jumbo
>>110128230No one can see the keysThe keys are generated inside HSM and stored there
>>110122482With jeets you lose
>>110123917holy kek
>>110128960yeah in an ideal world we can trust our HSM vendors to do the right thing, but most implementations in these third world countries have some retard generating the key on his laptop and then uploading it because he "doesn't trust the HSM vendor because he is a colonialist dog"most people really don't understand how retarded and prideful these guys are, looking bad in public is akin to deathexample, Indian Air Force retard whining that they aren't getting enough information about the F-35, as if we should trust India of all countries with info about bleeding edge radar tech.https://youtu.be/3GCKLbPQ6dIunless white people wake the fuck up we're going to have much more dire consequences coming down the pipe considering these dipshits are in control of so much of US infrastructure and corporate capital
>>110122482why in the fuck are we using indian ssl? the fuck is going on.
>>110129085got cross-signed by Sectigo so now every device since 2004 that supports p-384 and hasn't had the cert revoked can be TLS spoofed. These goofballs fucked up but sectigo also fucked up even more by not doing diligence before cross-signingalso everyone should read the bugzilla thread it's funny as fuck. It's extremely possible the new cert they're deploying over the old one (G1) is also compromised according to googlehttps://bugzilla.mozilla.org/show_bug.cgi?id=2083449
>>110129085No one except indian are using indian sslHowever all clients worldwide have to trust their ssl so overseas indians can access their home service
>>110129144fucking retarded boomers and normies being dumb as usual
>>110129111This is just how its going to happen because people (retards) in the US are trusting foreigners. I would imagine that at some point something will happen to absolutely force us to never trust any of these retards. I think we are going to see a change so hopefully. Seeing how russia and china are stepping up their bullshit. People need to be reminded that the world is filled with evil and power hungry people willing to absolutely destroy everything to get what they want.
