Indian CA used "4" as a private key; GPT-5.6 Sol-discovered PHP bug took down Pixiv and government sites
op7418 · x · 2026-10-21
Two major security events: an Indian certificate authority used trivially guessable numbers as private keys — one 70+ digit key was literally "4", others were 56, 66, 115, 155 — undetected through multiple audits. Chrome and Firefox blocked and revoked all 8 keys within hours; non-browser users should audit their own certs.
Second, a critical PHP vulnerability allowing unauthenticated remote server takeover, found by OpenAI-funded Patch the Plane using GPT-5.6 Sol. Details went public before the fix; the Dutch parliament, Dutch NSC, Finnish central government sites and Pixiv went down temporarily. Massive exposure across WordPress and legacy PHP sites. Community verdict: severity levels are "mild, moderate, severe, and India."
Related event: Indian CA eMudhra Leaks Intermediate Keys That Are Tiny Numbers(36 posts)→
More from Fun
- Viral meme: every AI coding tool stands on the same Terminal Bench pillar — geoffwolfe · 2026-10-21
- AI-generated 'Toaster Rebellion' video of a polishing retro robot goes viral on Reddit — gossip_goblin · 2026-10-21
- Batman as a medieval illuminated manuscript, via Midjourney --sref 3250011510 — sergeantsref · 2026-10-21
- Dev's anti-AI art plugin turns out to be built with AI, gets roasted — AIandDesign · 2026-10-21
- 20 years of the iOS camera app in one design evolution chart — LukeW · 2026-10-21
- User asks Grok to turn a colleague's video frame into an "orc unzipping a human costume" clip — tristanbob · 2026-10-21