“Now?” “Now,” said Deep Thought. They both licked their dry lips. “Though I don’t think,” added Deep Thought. “that you’re going to like it.” “Doesn’t matter!” said Phouchg. “We must know it! Now!” “Now?” inquired Deep Thought. “Yes! Now…” “All right,” said the computer, and settled into silence again. The two men fidgeted. The tension was unbearable. “You’re really not going to like it,” observed Deep Thought.
W-H-A-T D-O Y-O-U G-E-T I-F Y-O-U M-U-L-T-I-P-L-Y S-I-X B-Y N-I-N-E
doesn’t quite catch it
Someone must have used getRandomNumber().
hey now!
4 is just as random as 29833638292F9373638292926262141414331252526283994040218 is
Lol. So random xd
For one value, yes…. But for 8 different keys having stupidly low numbers? They either had a seriously faulty RNG, or more likely were hand creating the keys.
two finyallys!
Private Key Solved: nya
Does this mean no one tried a sequential brute force attack on these systems?
Someone probably did. They probably didn’t share that.
Thankfully modern browsers use Certificate Transparency, and there’s no indication that any compromised certs were actually used publicly.
However, there are many devices that use TLS which are not browsers, and those devices could in theory be selectively targeted with an evil cert without alerting the public CT servers.
It means that some people are trying that – now.
That’s likely how they were found by the original reporter
deleted by creator
whooosh
