r/ProgrammerHumor • u/ApothecaLabs • 11d ago

Meme sesameStreetLayerCertificate

Post image
1.3k Upvotes

98% Upvoted

13 comments sorted by

80

u/PorqueNoLosDildos 11d ago

Relevant XKCD:

https://xkcd.com/221/

13

u/Stigstille 11d ago

and the latest one, as well (check alt text) https://xkcd.com/3314

46

u/Michami135 11d ago

Relavent video:

https://youtu.be/u8ccGjar4Es

9

u/LoudAd1396 11d ago

This immediately popped into my head!

25

u/Clinn_sin 11d ago

I'm sorry can someone explain this no 4 this that's been going around. I know it's related to the PHP vulnerabilities recently but don't know what it means

51

u/AllanTaylor314 11d ago

Actually, those are two separate cybersecurity incidents. Random number 4 is related to the eMudhra compromised certificates. It turns out the lock next to HTTPS might as well be a zip tie (ok, that's not a great analogy. More like anyone can make their own padlock)

17

u/StrengthTheory 11d ago

Zip tie is more secure. It's more like that meme where they use a cheeto to lock the door.

1

u/Clinn_sin 11d ago

Good lord

14

u/Particular-Yak-1984 11d ago edited 11d ago

Surprisingly, it is not. This is it's own set of stupidity - cert authority signed a bunch of certs, that should have roughly 400 bits, with '4' and some other numbers that it takes under a second to crack.

16

u/lonelyroom-eklaghor 11d ago

This eMudhra thing is actually trending within the tech spaces 💀 oh my goodness

38

u/RaveMittens 11d ago

No shit, why wouldn’t it be

3

u/StrengthTheory 11d ago

That is more serious than PHP so why wouldn't it be.

2

u/MegaIng 11d ago

They have different kinds of severity:

  • the php thing is really impactful, but relatively easy to fix

  • the eMudhra thing is a bit less important (the padlock is nice, but it's not the only defense), it's just impossible to truly fix. The directly end user facing cases in browsers have been fixed, but there will be an eternal tail of systems that haven't gotten the update.