logoalt Hacker News

nunez • today at 3:28 PM • 3 replies • view on HN

That's INSANE

Like, that had to be malicious right? ssh-keygen won't generate a key like this, and neither will openssl or whatever Microsoft is doing behind their CA server.


Replies

persedes • today at 3:46 PM

It's 0x0000000000000000000....4, but no, just good ol' human failure (and a bunch of extra f-ups along the way)

jms703 • today at 3:35 PM

You should read the report from mozilla.

➕ show 1 reply
alias_neo • today at 3:54 PM

Maybe it was just a mistake and they intended to generate a `--bitsize 4` thinking it was in kilobyte units.

shrug

I think they're just absolutely inept and should never be trusted with anything security related as an organisation if this is a mistake they could make.