Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It's also a reference to when the PS3 was first cracked, which was possible because they weren't really using random numbers to generate keys.

So yes, it is a serious accusation that points out their consistently lax programming techniques when it comes to security.



No.

The problem was that one of the parameters they used in their ECDSA signatures, k, was the same at least once. This allowed the key to be computed with simple math, but the generation of the key itself was not the issue.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: