How eMudhra Signed for a Year With a ‘4’ as a Private Key: Uneasy Money

A certificate authority's private key was the number 4 for over a year. Kain, Taylor, and Austin on why the internet's trust schemes are cracking. 🔥 EPISODE LINK 🔥 https://unchainedcrypto.com/uneasy-money-is-the-internet-breaking-because-bots-never-get-lazy ======================================================================== Thank you to our sponsor! 👉 Put your crypto to work with Nexo: earn daily interest or borrow funds against your assets on one platform trusted by more than 10 million clients. Find out more at Nexo https://unchainedcrypto.com/go/nexo-podcast-yt Geo-restrictions, eligibility and terms apply. ======================================================================== Quick favor: We’re deciding what Unchained does next; new shows, stream times, what’s worth paying for. Our listener survey (https://unchainedcrypto.com/survey) takes five minutes, it’s anonymous, and I read the write-in answers myself. Everyone who finishes it gets a free month of Premium, Unchained or Bits + Bips, your pick. Open through Sunday, November 8. — Laura ======================================================================== For more than a year, the private key behind signatures from a certificate authority trusted across the internet was the number 4. Taylor Monahan walks Kain Warwick and Austin Griffith through how eMudhra passed two audits with eight weak keys, and why revoking them now runs on an email thread between Google, Mozilla, and Apple. Kain argues it fits a pattern: schemes that assumed nobody would bother trying, now facing AI agents that never stop. The hosts also cover two remote code execution bugs in PHP, Austin's $1 test that drew three competing theft transactions the moment it landed, papertrade's 1,000x leverage launch and its lose-to-earn token, and why DeepSeek keeps getting cheaper even as DHS bans it for government use. They close on Anthropic, and Kain's case that any frontier lab that turns cash-flow positive would be worth "infinity," a prospect he calls petrifying. Hosts: 👉 Kain Warwick - Host of Uneasy Money and Founder of Infinex and Synthetix - https://x.com/kain 👉 Taylor Monahan - Co-host of Uneasy Money and Security Expert - https://x.com/tayvano_ 👉 Austin Griffith - Co-host of Uneasy Money and Builder Enablement at Ethereum Foundation - https://x.com/austingriffith Timestamps: 🎬 00:00 Intro 🌐 02:07 Why a burst of unrelated internet-breaking bugs landed in the same 48 hours 🔑 05:13 How a certificate authority's private key turned out to be the number 4 📧 17:47 Why revoking bad certificates runs on a literal email thread 🤖 22:52 Kain on why schemes built on human laziness are unraveling against AI 🐘 25:34 PHP to shell: two remote code execution bugs in the language behind the web 🛡️ 33:21 How Cloudflare is shielding unpatched PHP admin panels during the rollout 🎣 36:04 Austin's $1 test: how fast bots drained a weak Ethereum private key 💼 37:44 Nexo: Generate daily interest on your crypto or borrow funds against your assets at https://unchainedcrypto.com/go/nexo-podcast-yt 🪣 38:25 papertrade's 1,000x 'bucket shop' and the token you earn by losing 📚 48:55 The mechanism design lessons hidden under DeFi Summer's degeneracy 🐋 52:35 How DeepSeek keeps getting smarter while Kain's API bill fell to $3 a month 🏛️ 57:06 Why DHS banned DeepSeek and why Austin says local models are the safer bet ♾️ 01:05:13 Why Kain says Anthropic gives off SBF vibes and could be 'worth infinity' 🎯 01:14:23 The drained-key update: bots grabbed 10-digit keys, but 12 digits held ======================================================================== #bitcoin #ethereum #crypto #cryptocurrencies ======================================================================== Subscribe to our channel! CHECK OUT THE CRYPTOPIANS → https://www.youtube.com/watch?v=DFzunCFXrv4 WEBSITE → https://unchainedcrypto.com UNCHAINED DAILY NEWSLETTER → https://unchainedcrypto.beehiiv.com/subscribe/ LAURA'S TWITTER → https://x.com/laurashin UNCHAINED TWITTER → https://x.com/unchained_pod FACEBOOK → https://www.facebook.com/unchainedwithlaurashin INSTAGRAM → https://www.instagram.com/laurashin/?hl=en LINKEDIN → https://www.linkedin.com/in/laurashin/ MERCHANDISE → https://unchainedpodcast.company.site/ ======================================================================== NEW EPISODES OF UNCHAINED EVERY TUESDAY AND FRIDAY! ALONG WITH BITS & BIPS AND THE CHOPPING BLOCK Apple → https://podcasts.apple.com/us/podcast/id1123922160?ls=1 Spotify → https://open.spotify.com/show/1cJrrfGY1SKBIRn5noKSAf?si=6SI4qIcRTEO7EhOe0V9n4w RSS Feed → https://feeds.megaphone.fm/LSHML4761942757 YOUR NO-HYPE RESOURCE FOR ALL THINGS CRYPTO!