this post was submitted on 21 Oct 2026
306 points (99.7% liked)
TenForward: Where Every Vulcan Knows Your Name
7565 readers
809 users here now
/c/TenForward: Your home-away-from-home for all things Star Trek!
Re-route power to the shields, emit a tachyon pulse through the deflector, and post all the nonsense you want. Within reason of course.
~ 1. No bigotry. This is a Star Trek community. Remember that diversity and coexistence are Star Trek values. Any post/comments that are racist, anti-LGBT, or generally "othering" of a group will result in removal/ban.
~ 2. Keep it civil. Disagreements will happen both on lore and preferences. That's okay! Just don't let it make you forget that the person you are talking to is also a person.
~ 3. Use spoiler tags.
Use spoiler tags in comments, and NSFW checkbox for posts.
This applies to any episodes that have dropped within 3 months prior of your posting. After that it's free game.
~ 4. Keep it Trek related. This one is kind of a gimme but keep as on topic as possible.
~ 5. Keep posts to a limit. We all love Star Trek stuff but 3-4 posts in an hour is plenty enough.
~ 6. Try to not repost. Mistakes happen, we get it! But try to not repost anything from within the past 1-2 months.
~ 7. No General AI Art. Posts of simple AI art do not 'inspire jamaharon'
~ 8. No Political Upheaval. Political commentary is allowed, but please keep discussions civil. Read here for our community's expectations.
Fun will now commence.
Sister Communities:
Want your community to be added to the sidebar? Just ask one of our mods!
Creator Resources:
Looking for a Star Trek screencap? (TrekCore)
Looking for the right Star Trek typeface/font for your meme? (Thank you @kellyaster for putting this together!)
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
is this a current event post or is 4 the new beans
Current event posts about an upstream computer security cert that ended up just being the number four (and others from the same company that were low numbers). Initial the post.
This is about compromised eMudhra intermediate TLS certificates. They were found to have weak private keys - eg. “4”, instead of a normal 116 character key. Major Internet panic for browsers and server admins.
Yup, and then the PHP vulnerability came out and eclipsed that on the "oh shit" scale
I'm dumb so this is probably more than half wrong, but they discovered a trusted certificate certifier in the middle east publishing dangerously unsafe passkeys. One of which was attached to a sight titled "We've got a problem Dave." Or something with a passkey of 4. Which means for an unknown time most Internet security was bypassed without our knowledge. As far as I'm aware there isn't evidence of someone successfully using the exploit but it's so dangerous that a small chunk of the Internet was completely locked down and things like Linux and many home electronics will be hit more than most.
Uhm, yeah more than half wrong… An indian certificate authority had produced a set of faulty certificates with private keys between three and eight bits long, when the standard is 384 bits. There is no malicious reason to do this, it was likely incompetence. The effect is that these certificates are trivially easy to reverse-engineer, meaning a bad actor could use them to sign certificates for any web domain, defeating the protection TLS provides against man-in-the-middle attacks. The certificates have already been marked as un-trustworthy on all major web browsers and operating systems, the risk lies with devices that do not get regular updates.
Edit: additionally, we know exactly when these faulty certificates were made and thus we also know for how long they have been exploitable
No malicious reason to do this he says, while Modi's coalition or at least the money behind it was known for having backdoor access to all their enemies somehow
You don’t need shitty private keys to do that, if you control the key gen you can just copy the not-shitty private keys