Mark Patrick "there is no spoon"🎙️ "look up!"

For the uninitiated - eMudhra is an Indian digital cert provider - it’s how your browser can tell for sure the website it’s visiting belongs to the person it’s supposed - they used relationships (bribery may have been involved) to become the provider to Indian government bodies - same method + social proof to become provider to Indian state owned banks and companies - ditto to South Asian and Middle Eastern banks and institutions - that social proof to become one of the trusted authorities to the global system built into every browser - they were supposed to passwords 116 digits long, ie hard to guess. - they used passwords of up to 3 digits long (one was simply “4”) - the certs which were compromised have been around for 18 months - why? - incompetence - these kinds of companies are usually conduits to channel political money from state owned companies into the hands of political parties - they rely on the security provided by the state, the ability to arrest people, rather than cryptography - expect this to be true OF ALL internet infrastructure in any part of the developing world - anything not run by big tech in those countries is suspect