tom7 is our true pioneer, his HTTPV made encryption completely insecure more cleverly. eMudhra’s approach of “just use a really weak key” is a bit boring in my mind! https://www.youtube.com/watch?v=M1si1y5lvkk
And to be clear, that’s a 384 bit key, so the key was just 381 zeroes in a row, then a 1, then two more zeroes.
Or, with using regular decimal numbers, imagine a combination lock where the code is 115 digits long, and the first 114 are just zero, with a 4 at the end.
In a world where absolutely every password needs 8 digits, a Capital, a number, and a special character, “clown” is the most secure password because no one would try it.
I don’t understand
The entire Internet went into panic mode yesterday because someone used 4 as their password.
What is the password? All I can see is *.
hunter2er
Just as xkcd predicted
https://xkcd.com/221/
Published in 2007, nice.
tom7 is our true pioneer, his HTTPV made encryption completely insecure more cleverly. eMudhra’s approach of “just use a really weak key” is a bit boring in my mind! https://www.youtube.com/watch?v=M1si1y5lvkk
wait he went to SIGBOVIK?
i don’t know what that means but y’all get all the cool conference names
https://sigbovik.org/ SIGBOVIK is a joke conference!
Dude I knew I got scooped, but to find out it was Evan? I will retire from flat earth science
Evan? who is that?
https://sigbovik.org/2026/
Worse–private key allowing forged https certs.
Not just 4, but for eight things they used numbers under 300
And to be clear, that’s a 384 bit key, so the key was just 381 zeroes in a row, then a 1, then two more zeroes.
Or, with using regular decimal numbers, imagine a combination lock where the code is 115 digits long, and the first 114 are just zero, with a 4 at the end.
I wish it was 7 instead. Could have played a Bowie track.
In a world where absolutely every password needs 8 digits, a Capital, a number, and a special character, “clown” is the most secure password because no one would try it.
If you’re brute forcing, you always do a dictionary attack first because it’s fast and someone will get hit.
i dunno, I&Need&TP&4&My&BungHole is full of dictionaries but it feels pretty secure. who watches beavis and butthead anymore anyways