StoryFirst seen
Anyone who knew that key could have targeted the verification system that protects banking and email sites, so the risk is still being cleaned up.
Everything it touches
5 names 3 voices 4 source posts
The story’s neighborhood
Explore the graph, or choose a connection below.
Follow the evidence
This brief comes from Tech Twitter’s edited headlines. The posts below are the sources grouped with the story; statements in them belong to their authors.
TL;DR of this week. Your aunt’s password: “P4ssword!” (on a Post-it note in the kitchen) The stewards and guardians of the internet’s encryption’s password: “4” Yes, just 4. This key could be used to target and decrypt ~everything, and we’re still cleaning up residual risk.Read original on X
Quest Diagnostics has been hacked. Patient data was exposed. They serve roughly half of U.S. hospitals and physicians. Investigation ongoing.Read original on X
There's about a coin-flip chance Quest Diagnostics has run your blood work in the last three years. On Wednesday, Quest found a stranger inside the system doctors use to pull up those results. Quest hasn't said how many people are affected yet. Its SEC filing just says the intruder got into "certain patient records," and the company is still working out whose. Here's why this one should bother you more than the usual "your email got leaked" story. When someone steals your credit card, your bank kills the number and you've got a new card in a few days. A lab result doesn't work like that. If it says you're HIV positive or that a biopsy came back bad, that stays true about you no matter how many copies are floating around. The system is called Quanum Lab Services Manager, and clinics use…Read original on X
The secret key that's supposed to prove a website is real, the thing behind that little padlock in your browser, turned out to be the number 4 at one company this week. Anyone who knew it could have faked your bank's website, your email login, pretty much any site you visit. And it wasn't even the scariest thing to happen online in the last four days. Here's how that works. A handful of companies called certificate authorities vouch that your bank's site really belongs to your bank. Their keys are supposed to be numbers more than 100 digits long, which is why nobody can guess them. An Indian authority called eMudhra had eight of its keys exposed, and one of them was literally 4. Chrome and Firefox blocked them within hours, but plenty of apps and servers don't check for that kind of…Read original on X
Internet encryption master key was protected by the password 4
Internet encryption master key password was just 4
Internet encryption master key was protected by a password of just 4
Internet encryption master key was protected by a password of just 4
Internet encryption master key password was just 4
Internet encryption master key was guarded by just the number 4
Internet encryption master key was protected by a password of just 4
Internet encryption master key was protected by the password '4'
Shared connections
It would be a second AI lab claiming a result against the same decades-old complexity conjecture.
Hackers threatened covert ransomware on customer PCs, and have now released stolen company and customer data.
Price cuts are pulling large AI spending contracts away from Anthropic and intensifying competition between the labs.
The filing gives investors their first detailed look at the AI lab's finances and profitability.