GeneralBreaking NewsBreakingLatest News
Internet on Alert After eMudhra Uses Shockingly Weak Keys, Google and Apple Rush to Block Them
Sentiment: NeutralHigh Priority
What Happened?
A major flaw in eMudhra's digital certificates has been discovered, prompting urgent action from tech giants like Google and Apple to block the compromised keys. Security experts warn of potential long-term impacts.
Key points
- eMudhra's certificates had security keys between 3 and 8 bits, far weaker than the standard 384 bits.
- Wayne, a security researcher, alerted tech companies on October 17 by demonstrating the vulnerability.
- Major companies like Apple, Google, and Mozilla quickly blocked the compromised certificates.
- Experts warn that fixing this flaw could be a massive cleanup effort, potentially larger than the Heartbleed bug.
- Currently, there is no evidence that the weak keys were used for malicious purposes.
Key insights
- The rapid response from tech giants highlights the importance of cybersecurity in maintaining user trust.
- Long-term implications of this flaw may lead to increased scrutiny of digital certificate authorities.
- Users must ensure their devices are updated to protect against potential vulnerabilities.
Why it matters
This flaw could affect the security of countless websites and user data if not addressed promptly.
Tags
Entities
eMudhra· OrganizationGoogle· CompanyApple· CompanyMozilla· CompanyWayne· PersonHeartbleed· Event
Source
India Today
