logoalt Hacker News

Velocifyer • today at 7:19 PM • 1 reply • view on HN

Download the leaked keys at https://github.com/Fluepke/emudrahahahahaha


Replies

eqvinox • today at 7:37 PM

I would {hope,expect,urge} the people who can easily convert those numbers into proper key form to just not do that, to leave the tiniest of barrier of entry for trolling scriptkiddies.

Browsers might've gotten their magic revocation updates, but a lot of other things haven't… (and yeah this is "security by hoping hard enough", but still better than nothing.)

https://emudhra.we-have-a-problem.com/ tests all certs. If you don't trust that for whatever reason, https://bgp.tools/ also shows a banner at the top if you're vulnerable.