We've been hardening security over the last several months, including today, and everything seems to be fine.
But, it's only Wednesday so we remain vigilant!
You're right 🎯🎯
Every time you type your password into your bank, Apple, or Google, you see that little lock icon in your browser. 🔒
That lock is the only reason you know you are talking to the real company, and not an imposter stealing your money.
And today, that entire system almost collapsed because of an unbelievable corporate blunder.
Here is what just happened in plain English:
To keep the web safe, the internet relies on a handful of official digital "passport agencies" called Certificate Authorities. Their entire job is to stamp websites as genuine.
To forge one of their stamps, a hacker would normally have to guess a secret master code that is 116 digits long. It would take a supercomputer billions of years to crack.
Today, one of the biggest official authorities on the planet pushed live master codes that were literally:
4, 56, 66, 115.
You read that right. A toddler guessing random numbers could have unlocked the entire internet's master vault.
With those numbers, anyone could create a fake website for your bank or government, and your computer or phone would tell you: "Yup, this is 100% official and safe."
The worst part?
The tech world spent 30 years telling us that putting our trust in centralized corporate gatekeepers was safe.
Yet the entire world's security was brought to its knees because one company pushed test homework into production and forgot to check the locks.
You cannot patch human incompetence across billions of devices. You have to remove the middlemen entirely.
Real digital security cannot depend on corporate trust cartels. It has to be governed by unbreakable mathematics.
See the signal. ♾️
Internet encryption is currently having a nuclear meltdown.
Cryptographers are calling it "bigger than Heartbleed."
A global Certificate Authority just leaked 8 master private keys that allow anyone to impersonate any server on Earth (Google, banks, government sites).
A normal master key has 116 digits of entropy.
The actual leaked keys?
4. 56. 66. 115.
A toddler on a calculator could have cracked them.
While browsers patched it today, millions of IoT devices, Linux servers, and Docker containers will take years to clean up.
We bet global digital security on centralized human gatekeepers who forgot to check their math.
True security can't rely on trust cartels. It has to be governed by mathematical consensus.
See the signal. ♾️
We created a little program to trigger arbitrary code from Zcash payments called "Zcash Payments Hooks" aka `zcash-paymentd`. It runs alongside a @ZakuraZcash node.
https://t.co/Z4t18RL8fQ
Hoy participando en la conversación sobre @free2zcash y su nuevo lanzamiento, felicidades a @_skyl@0bkevin y equipo por todo lo nuevo que estamos viendo en la plataforma preferida para blogging en #Zcash 🥳
Crea tu perfil y participa en el concurso:
https://t.co/uPYhkoF2Mm
Hoy voy a estar hablando un poco sobre @free2zcash
Estaremos hablando sobre cómo pueden utilizarlo para crear contenido conectar con la comunidad y recaudar fondos 🚀
Gracias a @yoditarzk y al equipo de @zcashesp1 por la invitación 🇻🇪🇻🇪🇻🇪
Para conocer más de cerca todo lo que Free2z tiene para ofrecerte y cómo sacarle el máximo provecho en su actual versión, te invitamos a unirte a esta conversación con @0bkevin, uno de los desarrolladores de @free2zcash.
¡Te esperamos! 😎👋
https://t.co/BDY8PJnNQF
Here's our plan for quantum-safe, unlinkable, rotating taddrs. Possible with Zcash, today.
While others are worrying about the viability of rotating transparent addresses, we're already solving linkability.
https://t.co/LE0OOKUKgA
Opinion: https://t.co/FnST8khvH4
Imagine an enormous fund that continuously and iteratively pays 1000s of top cryptographers, engineers, and other talent for decades. Zcash still has a long way to go to deliver freedom to the world. Don't think in years; think in decades and centuries.
cc @maxdesalle@nuttycom