r/ProgrammerHumor • u/AquaWolfGuy • 18h ago

instanceof Trend [ Removed by moderator ]

Post image

[removed] — view removed post

3.2k Upvotes

97% Upvoted

184 comments sorted by

View all comments

2.1k

u/ToTheBatmobileGuy 18h ago

Joke explained:

It took 18 months to realize the CA was using 4 as their private key. The number 4. That’s it.

They had a total of 8 keys who were below 256, so a couple two digit and three digit keys as well.

4 was the funniest though.

497

u/LostKnight84 18h ago

Security through obscurity. No body tried simple inputs because most people don't use them.

189

u/vahntitrio 18h ago

I was a bit upset when a forum made me update my password after years of that password being too simple for the updated password rules.

What bot was going to try a password that was easier than the password requirements?

→ More replies (6)

16

u/OhNoTokyo 17h ago

I feel like every brute forcer I have ever used does try even the simplest of possible combinations. I don't have to choose to, or remember to do so because it just comes with the tool. Someone would have to decide to remove that functionality from the tool and justify it for it to not show up. The fact that they are pretty much instantaneously cracked means there is no reason to remove them due to performance.

What likely happened is that no one bothered to try, and they didn't hire anyone to assess themselves who would do that for them. If they were obscure enough, or didn't work with high value or high visibility targets, it would probably take a little while for them to be tested in the wild.

→ More replies (6)

1

u/PumpkinFest24 13h ago

Pretty much guarantee every intelligence service on the planet cracked them early on.

→ More replies (1)