r/technology • u/deraser • 1d ago
Security The Internet goes on high alert after discovery of 8 compromised TLS certs
https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/956
u/Blackdragon1400 1d ago
Really shameful by eMudhra - they’ve squandered their community obligation with such reckless process allowing this to happen. Yikes.
→ More replies (4)412
5.5k
u/Fine-Solid9892 1d ago
Wish this was written so everyone (non technical folks) could understand what’s actually happened.
7.1k
u/runForestRun17 1d ago edited 13h ago
It’s the equivalent of finding out [random country] was issuing passports to anyone from anywhere with any name they wanted and you were letting their passports into your country cause you thought it was credible, so you have no idea who is actually in your country.
Edit: this is not political. Think of TLS as a websites “passport” that proves it is the website it claims to be. This protects against “man in the middle attacks.” If you have seen your browser say “Your connection is not private, this site may be impersonating website.com” then you have encountered a site with an invalid certificate. Could be malicious or just an expired certificate.
1.9k
u/shadesdude 1d ago
Following this metaphor, it is slightly different in that it is much easier to tell our computing systems that these 8 particular issuers are invalid and to ignore them.
258
u/Hey_Chach 1d ago
They’ve already patched most if not all of the major web browsers so the average person won’t be affected by this…
However, for the IT and software guys… yikes. I’m not a sysadmin or networking guy so correct me if I’m wrong but…
This is similar to the 2014 OpenSSL Heartbleed Vulnerability but worse, so look that up and its fallout for context. Basically any software, library, or embedded devices that keep their own certificate stores that don’t get updates pushed to them from a known-good certificate store that has already been patched are vulnerable. IIRC these bad certificates were first published in like April 2025 which is not great.
So in a way, yeah it’s easier to tell a computer to ignore these bad certs… but it’s a wayyyyy more difficult issue to root out each vulnerable system, application, library, etc. and then actually go patch those systems individually especially given how interconnected the internet and software ecosystem is.
59
u/survivalist_guy 21h ago
It's rough. Requires an on-path or network adjacent attacker, but lets them convince your computer that they (the attacker) are the site or service you are (or your computer is) trying to reach - not only that, but they can cryptographiclly prove it (which is how almost all trust works on the Internet nowadays).
Browsers have been updated, but what about your TV? Your Wi-Fi router? Thermostat? Baby monitor? Not only those devices, but a lot of the services that underpin other services ship with their own, hard to update dependencies. The software your bank uses to transfer balances relies on cryptographic trust. The components that run ATMs, Kiosks in your psychiatrist or doctor's office or the charting software they use, Point of Sale systems for paying your bar tab... These all run on trust - trusting that the service is interacting with is the right bank, health information exchange, payment processor, etc...
This breaks all of that, with limitations. Some code signing certs got leaked as well, which compounds the problem - anyone can say "this software is definitely from Microsoft, Apple, Google, etc... and here is the cryptographic proof" but that gets more technical.
→ More replies (3)→ More replies (3)57
u/FlowerAlternative630 1d ago
Everybody had to reset their password after Heartbl33d, that was my experience as a consumer
20
u/davebrewer 23h ago
My university issued a required password reset last week without any other explanation. All users, immediate reset, with a change from 8 to 15 characters minimum. I wonder if this is related.
29
u/cmurph570 23h ago
That password requirement was more than likely set by either an internal/external audit, cyber insurance requirements or worst case during a review after an incident of some kind.
A root CA being revoked is pretty big deal. May notice some resources down, or some normal functions not working if the admins haven't been able to pull down new certs issued by non effected CAs.
→ More replies (1)5
u/chowderbags 12h ago
Yeah. I remember that I had to change my password to hunter3.
→ More replies (1)507
u/runForestRun17 1d ago
I mean in my metaphor you can stop accepting new visitors with that one passport. :) but yes you are right, it’s past stuff that was fraudulent it’s blocked now.
195
u/waltwalt 1d ago
That explains all the emails I've been getting from major software providers telling me their banking information has been updated starting immediately.
82
u/Orisi 1d ago
Also the large influx of security risks I've been getting from NordVPN for my email address...
86
u/Hilby 21h ago
Ah yes....this would also go far to explain these billing receipts and payments for adult escorts and the like. It may even crack the mystery in my household on who has been withdrawing $500 + a week from the casino under my account!
Now if I could just put my finger on who is responsible for buying that shipment of cocaine that was delivered to my house last month!
Strange times indeed.......
→ More replies (2)19
u/Same-Ad-1532 16h ago
Don't worry, I'll investigate. Now, where did you put that cocaine? We'll start there
6
u/Daikato 15h ago
Pretty sure you can easily find the majority of it up his nostrils.
→ More replies (3)20
u/Armpitchair 23h ago
could this maybe explain the random emails i’ve been getting saying i’m signed up for websites i’ve never heard of?
33
u/thefuckevengoingonan 22h ago
No. but that's an issue you really need to look into
→ More replies (1)12
u/dabombnl 23h ago
It is the opposite. Sure, browsers can be updated quickly and indeed already are, but there are millions of devices out there that will not be updated any time soon. This is way worse of a cleanup job than heartbleed was or what airports/borders would have had to do with passports.
→ More replies (3)40
u/calibrono 1d ago
Following this metaphor, it's actually really hard to tell everyone about it because a lot of countries are only reachable by pigeon mail or by boat or don't want to be reached out to at all.
45
u/groumly 1d ago
More like they’ve (probably) been checking that they’re issuing passports to the right person.
But their passports are printed on stock paper, making it trivial for anybody to make a fake passport that is indistinguishable from a legit one.
They actually had the paper with the right security features (holograms etc), and they can easily/instantly reissue new, unspoofable, passport to all their citizens.
The immigration agencies have been informed not to accept the old passports, but there’s a bunch of bouncers at bars, weed shops, etc that didn’t get the memo, and will keep accepting the old fake passports, some forever. And some really poorly run shops will actually reject the new ones, while accepting the old ones.
→ More replies (1)115
u/EffectiveEconomics 1d ago
Except that the compromise lives inside all of the passport controls of every nation and every passport control officer. Until they’ve been updated with the correct list of trustworthy passports they will keep accepting the compromised passports even if the issuing country revoked them.
40
u/runForestRun17 1d ago
I tried to make it as simple for non tech people. But yes thats a more accurate metaphor.
28
20
u/warlizardfanboy 1d ago
I used to manage the access and crypto team at work. All nighter emergency cert rotation flashbacks kicking in….
→ More replies (3)23
→ More replies (22)6
136
u/The-Copilot 1d ago
Basically there are things called "Certificate Authorities" who are the third party middle men who give out certificates which are like encrypted proof that the website is legit and your browser checks this when connecting to a site.
This Certificate Authority used weak encryption that was broken by someone and some random person just casually dropped a fake signed certificate as proof. They didn't use it maliciously but it's big deal that it was possible because cyber criminals could have used it to certify fake websites as legit.
This one was a smaller one in India so it's not a freak out moment but we have been seeing a weird amount of breaches in small upper level parts of the "chains of trust" that is needed for the internet to be safe to use. It's not very comforting, but I'm guessing we are seeing AI making it really fast and easy to test tons of stuff even by mediocre hackers.
19
u/Exepony 14h ago edited 11h ago
This one was a smaller one in India so it's not a freak out moment
The problem is that it doesn't really matter if it's DigiCert or a random Indian CA, as long as it's in your client's trust store, the attacker can still impersonate any domain they want to. Sure, anyone running a website doesn't have to rotate their certs now, but for clients it's absolutely a freak out moment.
→ More replies (3)8
u/Kaisogen 22h ago
The issue seems that basically most of the private keys were zeroed out by accident. Hell, one of the keys was literally "4"
378
u/theBoobMan 1d ago
They are faking secure connections with a valid credential maker. So you think your browser maybe secure when it may not have been.
→ More replies (8)195
u/False_Raven 1d ago
Sooo basically if we visit a trusted site, it could be compromised without anyone knowing? And they could steal data like card information on checkouts?
41
u/Cold-Inspector-1945 1d ago
It'd still require a compromised DNS or man in the middle attack to send you to the compromised site IP with the "valid" certificate.
Just being able to create a valid certificate for say google.com does not mean the traffic sent to Google is suddenly compromised. There's more that needs to happen in order to actually compromise secure access to google.com.
15
u/cakemates 1d ago
Or an email that looks legit, sends you to a website that looks legit and is verified by legit certs... The average joe wont even know what hit em.
76
u/theBoobMan 1d ago
Anything you sent them should be considered compromised. If you sent anything but they are saying this is an 11/10 fuck up.
60
u/JMEEKER86 1d ago
Yep, if they have managed to create fake certs that look real then there's no way to know for sure if a site is actually secure or not. There could be man in the middle attacks everywhere stealing info and we wouldn't know until the info starts getting sold on the dark web.
→ More replies (4)11
26
u/CatProgrammer 1d ago
Super secret codes that protect the internet were actually just tiny numbers like 4. Literally the number 4. Somebody fucked up big time and now everything associated with those codes and who published them has to be discarded.
→ More replies (1)→ More replies (23)101
u/FCCRFP 1d ago
# Eight Weak Website Security Keys Cause Global Alert
**A simple explanation of what’s happening and what it means for you**
*Based on reporting by Dan Goodin, Ars Technica, October 20, 2026*
---
## What happened, in plain terms
Imagine every legitimate website has a digital ID card that proves to your web browser, “Yes, I really am who I say I am.” Your browser checks that ID card before showing you the site, and it only trusts ID cards issued by a short list of approved organizations called Certificate Authorities.
Last week, security researchers discovered that one of those approved organizations—an Indian company called **eMudhra**—had issued eight special ID cards with a shocking flaw: the secret passwords used to lock them were incredibly weak. In fact, they were so short and simple that anyone could figure them out.
Because these were “intermediate” ID cards, they had the power to issue *new* ID cards for *any website on the internet*. That means if someone cracked those weak passwords, they could create fake ID cards for Google, your bank, your email provider, or any other site, and your browser would trust them.
## What is a website ID card?
When you visit a website with “https://” at the start of the address and see a little padlock icon, your browser is checking the site’s digital ID card (technically called a TLS certificate). This card does two important jobs:
**Identity:** It confirms the website really belongs to the company it claims to.
**Privacy:** It sets up a scrambled connection so hackers on your Wi-Fi can’t read your passwords or credit card numbers.
These ID cards aren’t handed out randomly. Trusted organizations called Certificate Authorities verify a website’s identity first, then issue the card.
## Why these particular cards are dangerous
The eight cards from eMudhra came with secret keys—the digital equivalent of a master password—that were laughably short.
A normal key for this kind of security is like a password with roughly **384 characters**, giving it an astronomical number of possible combinations. The compromised keys were more like passwords that are only **3 to 237 characters** long. Some were essentially as weak as a one-digit PIN.
That means anyone with basic computer skills could guess or calculate those keys in a short time. Once they had the key, they could impersonate any website they wanted.
## Who found this and how
Someone posted a message on a website (emudhra.we-have-a-problem.com) saying, “We have a problem here.” To prove they were serious, they digitally signed the message using one of the eMudhra keys. That confirmed they had control of the secret password, which meant the keys were definitely compromised.
## What’s being done about it
Web browsers—the programs you use to surf the internet, like Chrome, Firefox, and Safari—have already blocked these eight bad ID cards. If you visit a site using one of them, your browser will show a warning instead of loading the page.
However, fixing this completely is harder than just updating browsers. Millions of other devices and systems also need to be updated:
- Smart home gadgets and internet-connected cameras
- Industrial equipment
- Some Linux computers and servers
- Mobile apps and programming tools that keep their own copies of trusted security lists
Many of these devices are never updated, are hard to reach, or are managed by people who may not even know this problem exists. Security experts say cleaning this up could take years and will be a bigger job than a famous 2014 security flaw called Heartbleed.
## Are you affected?
If you mainly use a web browser on a computer or phone, you’re probably already protected, because major browsers have blocked the bad certificates.
You should be more cautious if you use:
- **VPNs** (especially in countries where governments might monitor internet traffic)
- Non-browser apps that make secure internet connections
- Older or “smart” devices that don’t update automatically
Regular users don’t need to do anything technical right now. Just keep your apps and devices updated when updates become available, and be cautious about clicking through security warnings in your browser.
## The bottom line
This incident shows that the entire system of internet trust is only as strong as its weakest link. In this case, one company made a serious mistake with eight security keys, and it created a potential hole that could affect websites and devices worldwide.
The good news is that no one has reported these keys being used for actual attacks yet. The bad news is that because so many devices need updating, the cleanup will be slow and messy.
---
*Dan Goodin is Senior Security Editor at Ars Technica.*
97
u/SeenSoFar 1d ago
You missunderstood one detail. The passwords were not 3 to 237 bits. They were 3 to 8 bits. The largest key actually was 237. Not 237 bits. The key was the number 237.
79
u/EpidemicRage 1d ago
It's a GPT response. He didn't misunderstood, AI did.
→ More replies (5)25
15
10
u/Sweet-Awk-7861 1d ago
There's no "you" actually, you'd get a better response asking any LLMs than asking that guy.
37
→ More replies (1)14
513
u/kogai 1d ago
For non tech people, TLS is an encryption method (or collection of methods). Modern encryption basically works by converting the text or data into a number and then multiplying that number by 2 (or more) very large prime numbers.
To decrypt the message, you divide by the prime numbers. Two large numbers multiplied give you a much larger number, and so checking which prime numbers make up the big number is a very time consuming task unless you know what the answer is - that is, you have the decryption key.
There are other reversible math operations that are easy to perform in one direction but difficult to reverse unless the key is known. The article uses something slightly different but im not super familiar with the details.
But the secret key numbers that were supposed to be known only to the secure party were (4, 56, 66, 115, 155, 156, 230, 237).
These are... very very small for a secret key. The article states that the encryption method allows you to have 116 digit numbers in your secret key.
Its likely that it was test code that sneaked its way into live environments by accident.
Looks like a white-hat caught it and they've since revoked the key. Your device is still vulnerable to this if you havent updated the applicable devices, especially in places with public wifi, or other devices that connect your device to the internet
58
u/sxrxhmanning 1d ago
I still don’t get it - how do you know if you were affected? it could happen just by browsing any site recently? or something specific
47
u/mylittleplaceholder 22h ago
So, the vulnerability was with an intermediate certificate - it's something that validates that a web server is hosting the web site that the name is using. In contemporary use, it's only to verify the name of the server. So, if you go to reddit.com, the certificate that reddit has is proven (signed) by the intermediate certificate that you're on the real page and not a lookalike.
In reality, it's a relatively low risk for you. Someone would need to generate a certificate that appears to be valid (easy to do in this case) but then they need to you go to the fake site somehow. If you don't have malware and you're connecting through trustworthy networks then it's a nearly zero chance of it affecting you. If you're connecting to sketchy open wireless networks, this can be an issue until the problem is resolved.6
u/gandhinukes 20h ago
Yeah it basically requires a Man in the Middle attack so unlikely. But it could help if you accidentally click bad links or run malicious software.
→ More replies (5)14
u/foundafreeusername 22h ago
If you have the latest browser versions you are reasonably safe as long as this browser is not Microsoft edge.
As for apps: You don't know. You are completely at the mercy of the app developers here and unlike browsers they lack transparency to find out unless they are open source. Most apps rely on the OS to handle this though. Then it depends on your OS.
e.g. for Android:
Android devices and Googlebooks received an equivalent update through Google Play Services around 22:00 UTC on Monday. While the majority of Android devices have already received this update, users can also trigger an immediate update by restarting their device.
27
u/geekmansworld 23h ago
"I'm thinking of a number between 1 and 10^116. You'll never guess!"
"Is it four?"
"... damn."11
u/orangejake 1d ago
worth mentioning that modern encryption doesn't really use RSA. it can appear sometimes, but the certs in the article are ecdlog-based, and more modern trends have been moving to lattice-based schemes.
ECDlog: at a very high level of abstraction, mapping x -> c^x is hard to undo mod p. You can build cryptography based on this, but it requires "p" to be quite large (few thousand bits). instead people use a conceptually similar structure, though with an implementation that is more complex than c^x mod p.
lattice-based: mapping x -> Ax mod p (where A is a matrix) is easy to invert due to gaussian elimination. But if you add some error, x -> Ax + e mod p, it becomes hard. Again, there is some fancier stuff done for efficiency, but it's conceptually about this.
→ More replies (3)→ More replies (2)11
u/CallMeCygnus 23h ago
So how does this apply to me, and do I need to do anything regarding my devices?
→ More replies (2)
1.2k
u/Ignorance_15_Bliss 1d ago
My new company is called:
analog everything.
“We don’t want your data. Hell, I don’t even wanna know your name”.
We’re gonna sell washing machines and dryers with knobs and buttons, and parts you can install yourself if so be it old school clamshell cell phones that only make phone calls and T9 text video game systems you have to blow into the cartridge to make work.
333
u/Low-Elderberry-4734 1d ago
See the problem with that is that you buy once and then you get to actually own the thing, and that makes the fake money line go down and I can’t buy my poor daughter that Piper Meridian for her 16th birthday.
Best I can do is pay legislators to pass laws that indirectly kill your company in the name of “consumer protection” or something like that.
→ More replies (12)43
u/Dangerous-Pilot-6673 1d ago
I have a stupid expensive range hood that has needed the motherboard replaced twice. Why does a borderline commercial range hood need a motherboard. Oh right, because they think I want a Bluetooth connection to my phone so an app can control the hood. Instead of turning a dial.
I asked the dealer if there is anything that is just a hood that works with a knob. Commercial is fine. They won’t sell me one or install it. It’s infuriating.
→ More replies (11)19
u/wollflour 23h ago
My industrial grade range hood was $1000 like 3 years ago but it has two knobs and is dumb as hell. Best possible outcome.
→ More replies (1)113
u/DidItForTheRock 1d ago
Please start manufacturing new cars without infotainment screens 🙏
70
u/psychoCMYK 1d ago
dumb evs please
30
u/DidItForTheRock 1d ago
I'm all for this. To the point I wanna buy a classic car with a non working engine and EV swap it
→ More replies (7)22
u/obsequious_fink 22h ago
Check out Slate Auto. They have a small EV pickup/suv coming out that is dumb (like crank windows dumb) that will be in the mid $20k range. Supposed to be very DIY friendly and compatible everything from fast charge stations down to a regular 120v outlet. The only more modern tech it has is the standard safety stuff (backup camera, automatic braking, pedestrian detection, etc).
→ More replies (3)→ More replies (5)21
u/qatch23 1d ago
Heck I want a dumb TV.
15
u/Human-Crazy8114 22h ago
They do make those, they're more expensive because they're not subsidized by stealing data.
→ More replies (2)4
u/thedrexel 15h ago
If you’re tech savvy you can make your smart tv stop that shit. Here is the git for android and google os tvs:
→ More replies (9)5
u/ZippyTheRoach 23h ago
If Slate can make a go of it, that's basically what they are. I'm watching them myself
26
u/k7632 1d ago
I've actually wonder how possible it would be to create downgrade kits, where you can replace a few parts on your already owned machine to extend the life another couple of years
→ More replies (1)14
u/Bootyblastastic 1d ago
I would support a business that could dumbify my stuff. I also want some unit that connects to a smart device and feeds its non stop gobbledeegook all day scrambling the the data it collects
→ More replies (6)50
u/odinsen251a 23h ago
Why the fuck does my coffee maker need firmware updates.
30
u/Lunakill 23h ago
So it can brick itself when they stop supporting it. Otherwise you might not buy another one.
15
u/Seanna86 23h ago
So that you can only make coffee after watching a 30 second ad on its LCD display, duh!
8
8
u/BouncingBabyButton 21h ago
So it can play liberty bibbety adverts every time you turn the fucker on
→ More replies (1)→ More replies (5)8
u/MeggirbotOnMJ 20h ago
Sorry, the Starbucks x Kurieg Latte-o-matic has detected you are trying to use unauthorized Folgers coffee. As per our terms of service, we can't allow that to happen as it takes away from our shareholders pockets. Since this is your first offense, we will limit you to half a cup of Starbucks Dubai Chocolate (Dark). Further offenses will terminate our agreement and will be banned from all Starbucks Locations. Also stop drinking Folgers, you dont even have a sister according to the microphone in the water tank.
→ More replies (19)6
u/razzemmatazz 23h ago
How many more of us is it going to take to do this for real? I'm down.
Can we make the washer/dryer/oven modular so we only need one shell and one master board for all of them?
121
u/WelderResponsible916 23h ago
THE Internet?!
11
19
13
7
→ More replies (4)8
75
u/Random-Mutant 1d ago
The company I worked for in ~2018 got caught in a large scale distrust and revocation event. It might have been Symantec or GoDaddy, I can’t remember. We were notified overnight we had 12 hours and I saw the email that morning; we replaced our entire certificate stack in less than half a day, all hands to the pumps. I think that was the most urgent P1 I ever was involved in.
6
139
u/sambull 1d ago
hopefully none of the election infrastructure needed https
72
u/lysianth 1d ago
browsers already blocked the relevant certificate authorities. (except for win 10 edge apparently)
27
→ More replies (5)22
u/itsavibe- 1d ago
I have a sneaking suspicion this election with be the LEAST legitimate of em all…
→ More replies (2)
187
u/SkinnedIt 1d ago
The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.
Ho-lee-jeezus.
→ More replies (1)
277
u/WenatcheeWrangler 1d ago
What certs and by which issuer?
347
u/AnArmyOfWombats 1d ago
The eight intermediate certificates belong to India-based certificate authority eMudhra Limited.
Apparently they had 3-8 bit keys only, listed on the site. The spec allows for 384 bits, or 118 digits.
They used 3 digits at most. Oh no.
290
u/ColdFury96 1d ago
One of the keys was '4'. Not four digits, just '4'.
129
22
u/Justkeepbreathing123 1d ago
Baffling. So confused about how this could happen. Every reason that I can come up with, even things based on sloppy engineering like just doesn’t add up
→ More replies (2)15
u/Justkeepbreathing123 1d ago edited 1d ago
I understand the most plausible explanation is a broken random number generator but I’m still just struggling with how that would have actually been pushed to prod if they had any QA whatsoever
This is just like not the hard part and former CA incidents were more about the CA getting hacked or governance issues. This is just wild
→ More replies (1)39
u/SkinnedIt 1d ago
I don't understand why even in say a dev environment with no valuable data you'd go out of your way to override the default key sizes like that.
34
u/lightningrod14 1d ago
literally all i can come up with is it was done this way for the sake of being more easily exploitable
8
u/developer-mike 1d ago
But it's a bad way of adding a back door. A longer key shared with an attacker is a far, far better backdoor.
It's like a landlord spying on their tenants by either A. keeping a copy of a normal front door key themselves, or B, setting the door to only open via a key blank and handing such a key blank to the tenants on move in day hoping they don't notice.
→ More replies (1)14
u/SkinnedIt 1d ago edited 1d ago
You'd think a CA authority would have key size enforcement policies that would absolutely not allow this, no matter what the reasoning is.
These CSRs should have never been signed IMO. I'm leaning a lot less towards incompetence the more I think about it.
7
u/ekdaemon 1d ago
I bet I know how it happened:
...
sizeof(long): Evaluates to 4 on 32-bit systems or 64-bit Windows (LLP64 model)
→ More replies (2)35
257
u/Skycourtneyy 1d ago
eMudhra, a major Indian certificate authority.
Major browsers and root programs like Google Chrome, Mozilla, and Apple had to immediately block & revoke all 8 eMudhra intermediate certificates that were affected.
→ More replies (13)76
26
u/SMUHypeMachine 11h ago
Oh wow multiple issues in a single day? It was also just determined PHP, which runs like 70% of internet sites, has a critical bug that allows remote code execution from unauthorized sources.
25
u/ABystander987 23h ago
Alright. To heck with it, ill be the one to ask.
Can someone simplify this so someone who can only basically run the surface level stuff online, and understand that same surface level stuff, can understand this?
→ More replies (2)39
u/ScienceMarc 22h ago
TLS is used to secure the Internet. It requires certificates issued by authorities. If these certificates are compromised, there is a risk that the internet (at least the parts that use these certificates) becomes insecure, and people can impersonate websites.
In this case, these certificates were issued by an Indian certificate authority which used 8 bit numbers instead of the 384 bit numbers they were meant to use. This was a bafflingly dumb decision (assuming it was done on purpose and wasn't a glitch). It's the internet infrastructure equivalent of using "password" for your bank and email login.
Using this, a malicious actor could impersonate any website and steal data
→ More replies (10)7
u/ace2049ns 22h ago
Follow up question from another person who doesn't understand enough. How does 8 compromised certificate affect the entire Internet? Wouldn't it just affect the 8 entities that requested those certificates?
→ More replies (7)11
u/foundafreeusername 22h ago
Those certificates can basically be used to sign a letter like that: "I am eMudhra and hereby confirm that this computer <hackers computer> represents <insert your banks name>." A hacker can use the compromised certificates to generate these letters and use this to pretend to be any company. Your apps and browsers are hard coded to trust this letter until they are patched.
If a hacker gets between you and your bank (e.g. fake wifi access point) they can steal your login info.
→ More replies (3)
70
u/Wolfy4226 1d ago
So on a scale of "mildly concerning" to "Bring me my brown pants", where would this fall?
31
u/FriendlyDespot 1d ago
Imagine if anyone who got in the middle of your network traffic could say "hey I'm google/your bank/your employer" and your browser would say "this guy is legit, it's safe to put in your credentials." This falls in the same place as that.
→ More replies (1)30
19
u/HildartheDorf 1d ago
If you are on a private network where all the devices on it are trusted, mildly concerned.
If you are on a public network (cafe, airport, hotel, school, hospital, etc.), high concern.→ More replies (2)8
u/phree_radical 23h ago
and if you have IoT devices on your network, be aware that they can't be trusted
51
u/Direct_Day7937 1d ago
TLS certs are how a computer knows that the information it's sending to a website is encrypted. A compromised TLS cert means that there is no way to know if the information is encrypted or not, but your computer will act like it is. So any information you input into the website might just be readable by anyone with a free tool and some basic training. Like say your bank account, or a voter database.
30
u/JamminOnTheOne 1d ago edited 23h ago
The above comment doesn't understand the vulnerability and is full of misinformation.
TLS certs are how a computer knows that the information it's sending to a website is encrypted.
Not true. TLS certs are used to identify someone or something; it's how your computer knows that the website it's talking to is who they say they are.
there is no way to know if the information is encrypted or not
The information is still encrypted. The problem is that you don't know if the site you're talking to is who they say they are.
any information you input into the website might just be readable by anyone with a free tool and some basic training.
This is not true at all. Again, the data is still encrypted.
The actual vulnerability is potentially much more dangerous. It's that you (and your device and its apps) may be talking to an impostor without knowing it. You may be giving your bank username and password to an impostor site that can steal it. You may download an OS or app update that is bogus and contains malware.
The good news is that all mainstream browsers won't fall for it. The bad news is that a lot of Internet of Things devices (smart locks, streaming sticks, etc) might.
→ More replies (10)→ More replies (2)34
u/Aromatic-Two-8258 1d ago
".. know if the information is encrypted or not.."
It's still encrypted. It just means the keys are compromised and those with the proper keys can decrypt your data.
No average joe is reading plaintext data because it is still being encrypted on the wire/over the air.
The same way your home hosted web servers can have signed certificates that encrypt your data but your browser will complain because it's not signed by a trusted issuer.
→ More replies (6)→ More replies (3)8
u/CyberBadger2050 1d ago
Really wont be much of an impact to you most likely. They were certs issued in India. They could be used to sign apps and things like that to make them appear trusted. If you already downloaded something that was signed with these certs, depending on what the software is, once you authenticate it once you may or may not authenticate it again. Now that the certificate is revoked there is no longer a chain of trust. This means that if it were to try and authenticate it again that would fail and you would be alerted to it.
Others are talking about encrypted communication and while certificates are more common union used for that type of thing, it is much more likely these certificates were used for software signing.
→ More replies (6)
24
u/Smith6612 1d ago edited 1d ago
Well... that's not good. Yikes. I am still coming across devices which are vulnerable to Heartbleed and will never be patched.
This also brings me back to the days where malware on home PCs would exploit home routers with default passwords or vulnerable firmware and modify the DNS servers to ones controller by an attacker. Doing that allowed the attacker to point requests for certain websites to their own servers. Or, just return false data like they would for Windows Update and any Anti-virus vendor to ensure a PC remains vulnerable. They could combine a similar exploit with this vulnerability to get after IoT hardware and other equipment which will probably never see a patch.
On the flip side, this same exploit could be a boon for jailbreaking hardware.
→ More replies (2)
24
u/Cygnus__A 21h ago
I dont see anyone on high alert.
→ More replies (3)25
17
u/Brilliant_Cattle_602 12h ago
https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
Has a good explanation of both what happened and how it happened.
→ More replies (1)
14
u/EmbarrassedHelp 1d ago
This site checks to see if your device is still accepting the compromised certs: https://emudhra.we-have-a-problem.com/
→ More replies (4)
14
u/Logical_Welder3467 23h ago
This is company killer level of fuck up. Every corporate security team and open source project are furiously applying mitigate today. This company would not be trusted as CA
13
13
u/Street-Rooster-3031 1d ago
We definitely need something better than certificates to validate trust in 2026. Certificates often require manual intervention to update, which makes situations like these unbearable. The encryption is fine, but the distribution is crazy manual and cumbersome for 2026.
10
u/magicmulder 19h ago
> My guess is that it’s example code that accidentally leaked to production
I don’t know of any situation where an “example certificate” with a handful of bits would make sense.
I’ve fiddled a lot with this stuff when the German physician ID came out, and I never had to use a weak certificate for testing.
27
u/TopOTheMourning 22h ago edited 18h ago
These certificates were issued by some Indian company. If I'm not Indian, not accessing Indian websites, etc., is there any concern for me?
Edit: thanks for explaining.
→ More replies (6)36
u/Chagrinnish 21h ago
If you were hit by a man-in-the-middle attack where someone intercepted your DNS resolutions (e.g. someone found a vulnerability in your wifi router) you could have been directed to a fake site signed with this India certificate and not been aware of it. Your web browser treats certificates signed by any authority equally.
→ More replies (5)
24
u/jwarhol12 19h ago
If my IoT items (e.g., my web-connected door lock or my Nest thermostat) aren’t updated - so they’re compromised - what is the practical risk? Maybe someone could unlock my door remotely, but that’s not bad like my bank security being compromised, right?
38
u/Ign998747 12h ago
You're not getting a lot of serious answers, but if anyone wants a genuine one: The risk isn't just to the device itself. Let's assume we're talking about an average setup with off-the-shelf commercial equipment.
Every device on your network connects to your router and from there your modem through your Internet service provider. Your provider provides one public IP address, and your router translates that to specific devices. So, externally, all anyone can see at best is that one public IP. However, the router knows what everything is, and devices on the network can see each other. So, a compromise of a single device on that network, even if the device itself is not "important" (though I'd question your risk tolerance if your front door and thermostat are considered unimportant) still provides a way behind the wire to your home network. From that device, an attacker can scan and find the devices connected to it. When a new device connects (you come home or have someone over). When a device disconnects (you leave for work or go on vacation.) If they can get to the admin console on the router itself, forget it. They have everything. You might not even know they're there spying on you and connecting devices to your WiFi network for years.
Now, the saving grace here is that it doesn't happen often. But most people think "I'm not that important no one cares what I'm doing." Well, I've worked as a computer investigator for years, and I've seen a lot of compromised devices. 9 times of 10, it's a stalker or weird neighbor or something like that. So, China might not care about you, but are you sure that strange dude upstairs that's always trying to talk to you about lolicon isnt willing to do that if he can, in order to avoid detection for his own weird Internet traffic?
Secure your devices. You're worth more than you think.
5
u/Fireblast1337 11h ago
Wasn’t there a case of a hotel or casino getting hacked through an aquarium once?
→ More replies (3)7
u/cvynxbx76359ghs 11h ago
Yea casino lost their high roller database, exfiltrated through the aquarium thermostat iirc
→ More replies (2)5
u/dontlookatmreee 11h ago
How does one secure their devices?
→ More replies (1)4
u/Krojack76 6h ago
2 methods. Both can be done but #1 is most important.
Wait for the company that makes it to release a patched firmware update.
Make sure the devices on on it's own VLAN with limited access to your WAN.
#2 is much harder for your average person to do though so for the most part everyone just has to pray the manufactures patches the firmware then you apply that new firmware using whatever method the manufactures applies. Most are though the app you install on your phone to configure said devices with.
This is the major problem with IoT devices that companies stop supporting after 5 some years. They stop patching security flaws. Their fix is "well buy our newer device to get the latest security patches." There needs to be laws the require them to support security patches on these devices for 15-20 years minimum if you ask me.
23
6
u/pathos_ludens 18h ago
It needs a man in the middle attack. Your doorknob is safe cause no burglar will bother with the setup just to do it that way.
5
u/Some-Seaweed6858 18h ago
Could spoof an update URL to inject malware onto your devices that allows for remote command and control. Your IoT devices can then be used for attacking other devices on the internet/local network and routing malicious traffic to hide the attacker's identity.
→ More replies (9)7
u/I_AM_KARN 17h ago
They are in your network so they can be used as an entrypoint to get into your PC if there is another vulnerability.
→ More replies (4)
10
u/Animedingo 1d ago
Can someone explain like im 5
→ More replies (4)15
u/PF_Nonsense 1d ago
Your computer cant tell real websites from fake ones until you update everything
→ More replies (6)
10
u/Maskeno 1d ago
Just a reminder that if you weren't expecting an email from a site about your account, it's better to open the site separately and directly before logging in. These days anyone can spoof an email and make it look real enough..
→ More replies (4)
9
u/Super_Maintenance_83 11h ago
This problem was even more insane than the headlines make it sound. The secret keys to the certs at issue here were a single byte, literally one or two digits.
It's the equivalent of using a single number for your password, but that password could allow you to impersonate any website you want. The "password" should have been 48 random characters long.
8
u/Old_Soul2004 19h ago
Genuine question, what are tls certs?, i have no idea so i don’t know how worried I should be?
→ More replies (10)
23
u/Mean_Art5782 21h ago
Random idiot from all here, what dies this mean for me?
The I ly thing that this sort of reminds me of us verification that a site is the site it says it is and this is bad now or something
44
u/IrregularDoughnut 19h ago
If TLS certs are conpromised, it means your browser doesn't know for sure that the website its visiting is genuine.
In this case it's major because everyone trusts these certs. The easy example of why this is bad would be -say you're on the airport WiFi. Unfortunately you connected to a WiFI with the same name broadcast by John, who is sat in the airport with his own wifi box trying to steal your banking password. You try to go to whateveryourlocalbank dot com website, but actually it's a fake website run by John. Now, normally, your browser would say "nope, bullshit, this isn't the real website". But if the TLS certs are compromised by John's hacking group, they can make one that convinces your browser that it is the real website. So you log in and now John gets your banking creds. If he's feeling fancy, he even actually logs you in, by passing your requests through him to the bank and then back to you, and so you don't even notice because it all works as expected.
The good news is that usually John has to find a way to sit between you and the website. So if you're at home on your own private wifi, the only real way is for him and his friends to be working for your ISP, or to somehow fully compromise your ISP's systems. Or your government decides to be John and watch all your traffic.
There's more to it than this, but mainly it comes down to whether you'll get that big red warning on your browser if you go to a fake website pretending to be a real one. Apps can be tricked like this too.
→ More replies (25)12
u/pathos_ludens 18h ago
All major browsers - not you Edge - already blocked the certs. It’s a non-issue for consumers but a nightmare for any embedded device with a baked in root cert copy.
→ More replies (6)9
→ More replies (5)23
u/SgtTreehugger 20h ago
Basically it's like someone got their hands on a machine to print ID badges to your place of employment. They look like an authentic employee so they get in through the door but unless there are other holes in your security, they can't do much.
Obviously if you know anything about it you know theres a lot of places with a lot of holes in security but this is pretty much the top layer. It exposes you to danger if you use public wifi networks though
→ More replies (4)
57
u/steph66n 1d ago
For some context: The company responsible is eMudhra, based in India. These 8 dangerously weak security keys were generated in April 2025 and went undetected for nearly 18 months, until an independent researcher exposed them on October 17. The astonishing part is that their weakness was trivially detectable, raising serious questions about the company's quality control and security audits. The actual danger is that someone could forge trusted website certificates and potentially intercept communications, provided they could also position themselves between you and the website. It does NOT mean everyone's passwords, banking information or Internet traffic have been compromised. No malicious exploitation has been confirmed. Major browsers have already blocked the affected certificates, although older software and embedded devices may remain vulnerable until updated. eMudhra has revoked the certificates and is investigating its key-generation procedures; the root cause and accountability remain unresolved.
Kudos to the commenter who used the passport analogy — an excellent way to explain the problem without drowning everyone in technical jargon.
→ More replies (4)
6
u/GhostsinGlass 1d ago
One of the passwords they used was "4", hahaha.
It would have been "5" but the admin was off sick that week from B-tech and didn't realize you could count the thumb too.
6
48
7
6
u/now_hear_me_out 1d ago
Does this affect apps on my phone? Say if I have proton vpn app on my phone could it have been vulnerable to an automatic update that installed a dummy application?
Sorry for the likely dumb question but I’m a very simple layman when it comes to this and not entirely understanding the issue at hand
8
u/corey389 1d ago edited 19h ago
Yes it can effect apps on a phone but I wouldn't worry about it a VPN doesn't really do much for privacy in this case, basically a VPN just hides your browsing habits and changes your IP. The cert it tells you if a Web site is valid through a web browser like a bank site.
→ More replies (1)
17
u/UseMoreHops 19h ago
key size of 3 to 8 bits! What did they break it with a notebook and pencil? lol PS... this was resolved by all major browsers almost immediately by publishing a new CRL. big whoop. If you are using a CA that allows for such crazy key size you deserve it.
→ More replies (9)
14
u/cerberus_1 1d ago
Imagine only being able to get to any location without GPS. Then your GPS get hijacked and instead of going to your bank, your GPS sends you to a fake bank run by thieves.. or a fake grocery store that has insanely cheap prices for everything you're looking for..
except all of it looks real, your apps tell you its legit.
→ More replies (1)
31
u/BoredOfReposts 1d ago
Stuff like this reminds me of prior conversations on reddit where people were so insistent on tls being this infallible security layer. “Oh don’t worry about using the wifi on a hotel network, as long as you’re using tls https blah blah blah.” Heavily upvoted. Then comments about this kind of stuff being possible, massively downvoted. Goes to show the crowd doesn’t always know especially on bigger subs.
8
9
4
u/Dazzling_Line_8482 23h ago
“My guess is that it’s example code that accidentally leaked to production, but hard to know. But it’s bonkers that no one noticed.”
You're absolutely right! The secret should be more than 4 characters long! I was just using a simple example if this for a Certificate Authority you should definitely not run this code in production!
1.3k
u/trilobyte-dev 1d ago edited 10h ago
This is fucking hilarious on so many levels:
The private key, which is normally a huge number no one would be able to keep in their head, was 4. 4.