tom7 is our true pioneer, his HTTPV made encryption completely insecure more cleverly. eMudhra's approach of "just use a really weak key" is a bit boring in my mind! https://www.youtube.com/watch?v=M1si1y5lvkk
And to be clear, that's a 384 bit key, so the key was just 381 zeroes in a row, then a 1, then two more zeroes.
Or, with using regular decimal numbers, imagine a combination lock where the code is 115 digits long, and the first 114 are just zero, with a 4 at the end.
In a world where absolutely every password needs 8 digits, a Capital, a number, and a special character, "clown" is the most secure password because no one would try it.
23 replies
It worked until it didn't, success!
Unless it didn't, but there's no way to know!
18 months, someone had to have figured it out before this week. Be careful if you thought your VPN was good.
I don’t understand
The entire Internet went into panic mode yesterday because someone used 4 as their password.
Just as xkcd predicted
https://xkcd.com/221/
Published in 2007, nice.
tom7 is our true pioneer, his HTTPV made encryption completely insecure more cleverly. eMudhra's approach of "just use a really weak key" is a bit boring in my mind! https://www.youtube.com/watch?v=M1si1y5lvkk
wait he went to SIGBOVIK?
i don't know what that means but y'all get all the cool conference names
https://sigbovik.org/ SIGBOVIK is a joke conference!
Dude I knew I got scooped, but to find out it was Evan? I will retire from flat earth science
Evan? who is that?
What is the password? All I can see is *.
hunter2er
Not just 4, but for eight things they used numbers under 300
And to be clear, that's a 384 bit key, so the key was just 381 zeroes in a row, then a 1, then two more zeroes.
Or, with using regular decimal numbers, imagine a combination lock where the code is 115 digits long, and the first 114 are just zero, with a 4 at the end.
Worse--private key allowing forged https certs.
I wish it was 7 instead. Could have played a Bowie track.
In a world where absolutely every password needs 8 digits, a Capital, a number, and a special character, "clown" is the most secure password because no one would try it.
If you're brute forcing, you always do a dictionary attack first because it's fast and someone will get hit.
i dunno, I&Need&TP&4&My&BungHole is full of dictionaries but it feels pretty secure. who watches beavis and butthead anymore anyways
modern problems require modern solutions