bad idea: bot that tries to automatically factor all TLS secrets, but is limited to just trying the first couple thousand numbers
it shouldn't ever succeed. and yet, if it does, we know something has gone very wrong
Discussion
bad idea: bot that tries to automatically factor all TLS secrets, but is limited to just trying the first couple thousand numbers
it shouldn't ever succeed. and yet, if it does, we know something has gone very wrong
@foone Thats one of those things that I always just assumed existed but nope, guess not
@foone Isn't part of "random" that you in fact may guess the correct secret on the first try, it's just extremely unlikely?
I almost said "the first couple thousand primes" but obviously that'd be a mistake
yeah turns out I'm not the first person to have this idea, and they're already working on it!
@foone well it's not like any would use a non-prime number like 4 or something
@foone I don't fully understand what your idea is, would you mind explaining it to me?
I know it has something to do with the eMudhra incident and you basically want to look for more vulnerable certificates?