Tú teniendo síndrome del impostor y en el otro lado del mundo gente confundiendo 384bits de cifrado con 384 posibilidades de clave
News: We now know how eMudhra broke its CA keys. They were not stolen. They were tiny numbers: 4, 56, 66, 115, 155, 156, 230 and 237.
What happened: On Oct 17 a researcher named Wayne found he could recover the private keys of eight eMudhra intermediate CAs from their public certificates. He signed "We have a problem here - Wayne" with each key and sent it to the browser root programs. Mozilla rebuilt the keys on its own the same day.
Who is hit: Six of the CAs issue TLS certs and chain to emSign ECC Root CA - G3, trusted by Chrome, Firefox, Apple and Microsoft. Two sign code. Sectigo cross-signed all eight under "AAA Certificate Services".
How eMudhra got it wrong: These are ECDSA P-384 keys. A real one is a random number about 116 digits long. All eight were below 256, so you only need to try 255 values. eMudhra says that at an April 2025 key ceremony on Utimaco HSMs, it changed its usual steps to test key wrap/unwrap for export. A bug in its script made a second, weak set of keys. Staff then used the weak keys for the CSRs by mistake, because the key labels looked alike. eMudhra is still hunting the exact bug.
Why browsers were safe: No certs from these CAs appear in CT logs, and Chrome, Firefox, Safari and Edge reject unlogged certs. eMudhra says none of the eight issued end-entity certs. But curl, scripts, apps and devices that skip CT and revocation checks could have been fooled since April 2025. No one knows if that happened.
What to do now:
- Update ca-certificates (Ubuntu, Debian, Fedora, Alpine, Arch)
- NSS 3.131.1, Firefox 158.0.1
- Go 1.27.3 or 1.26.10, certifi 2026.10.19, pip 26.2.2, uv 0.13.4
- Node.js and Bun: fix pending
- macOS /usr/bin/curl still uses the old /etc/ssl/cert.pem
- Sites on emSign ECC Root CA - G3: Chrome drops that root Oct 27. Get a new cert now. eMudhra says about 30,000 certs must move.
bugzilla.mozilla.org/show_bu…
Vivian retweeted
In Season 1 (One!) of this show, Sue Sylvester was fired from her job and then slipped the school principal a date rape drug at dinner, took intimate photos with him, and blackmailed him to get her job back.
How in God’s good name will they revive this in 2026.
“Glee” is back! Disney+ and Hulu have greenlit a reboot of Ryan Murphy’s musical dramedy series.
• Casting information is not yet known, though it can safely be assumed that several of the original stars will return.
• Murphy recently revealed that he finished the script for the reboot. “I just finished the script an hour ago,” he told Entertainment Tonight. “So, we have a script. Brad [Falchuk], Ian [Brennan] and I, who wrote all the first two seasons, have written something. I’ve been in touch with around 10 of the original cast members. It’s very sweet, and they all had a lot of questions, but they all were very enthusiastic about the idea.”
wp.me/pc8uak-1lHYUU
.@ZohranKMamdani do something
Vivian retweeted
Los jóvenes no saben, pero nosotros veníamos a pelear con Ryan Murphy TODOS LOS DÍAS. Y el calvo miserable ese respondía. Nos odiaba y nosotros a él.
Esta imagen literalmente me genera pesadillas.
Vivian retweeted
Many people seem to fail to grasp that a core symptom of autism is developmental delay. There is no shame in being childish as a result of your autism and I wish allistics weren't so mean about it
Vivian retweeted
J.K. Rowling has published a new essay defending her views on the trans community and calling out trans activism in the 21st century for being "elitist."
"My views haven't changed... what to me represents no change at all in my political or ideological outlook has, in recent years, seen me and women like me subject not only to criticism but also to death threats. This is because we oppose the current, dominant strain of trans activism, which holds that a man who declares himself a woman is, literally, a woman, and is therefore entitled to be treated as a woman in all contexts..."
variety.com/2026/tv/global/j…
Vivian retweeted
the thing you have to keep in mind about glee is that it was simultaneously offensive af and also the most progressive show on television at the time
Vivian retweeted
satan will return as lucifer in dante's inferno
Lea Michele will return as Rachel Berry in the ‘GLEE’ reboot.
🔗 variety.com/2026/tv/news/lea…
Vivian retweeted
the most vicious harassment i and my loved ones have ever received came in the days after Rowling targeted me personally, posting uncensored images of my account to her millions of followers calling me a man in a dress. i had just turned 21, and had less than $100 in my account
J.K. Rowling has published a new essay defending her views on the trans community and calling out trans activism in the 21st century for being "elitist."
"My views haven't changed... what to me represents no change at all in my political or ideological outlook has, in recent years, seen me and women like me subject not only to criticism but also to death threats. This is because we oppose the current, dominant strain of trans activism, which holds that a man who declares himself a woman is, literally, a woman, and is therefore entitled to be treated as a woman in all contexts..."
variety.com/2026/tv/global/j…
Vivian retweeted
Between October 2020 and August 2026, nearly every single up-to-date Linux server running PHP was wide open for anyone in the world to gain root access.
Holy shit.












































