- Published on
eMudhra's certificate keys got compromised in October 2026 - and one of them was literally the number 4. I take what I learned writing about TLS and Diffie-Hellman and use it to reproduce the weak key myself, step by step.
All Posts
All Posts
- security (7)
- linux (6)
- tls (3)
- encryption (3)
- certificates (3)
- cryptography (3)
- python (3)
- ai-assisted-coding (3)
- api (2)
- authentication (2)
- backend (2)
- cybersecurity (2)
- nodejs (2)
- docker (2)
- networking (2)
- iot (2)
- postgresql (2)
- fastapi (2)
- mathematics (2)
- web-development (1)
- https (1)
- vulnerability (1)
- kernel (1)
- bcrypt (1)
- debugging (1)
- computer-vision (1)
- machine-learning (1)
- detection (1)
- safety (1)
- ffmpeg (1)
- automation (1)
- cli (1)
- video-editing (1)
- web-servers (1)
- nginx (1)
- ubuntu (1)
- apache (1)
- installation (1)
- http (1)
- embedded-systems (1)
- li-fi (1)
- communication (1)
- wireless (1)
- pyqt6 (1)
- desktop-app (1)
- pypi (1)
- gui (1)
- quantum-computing (1)
- technology (1)
- microsoft (1)
- majorana (1)
- topological-qubits (1)
- typescript (1)
- jwt (1)
- redis (1)
- devops (1)
- reverse-engineering (1)
- rtsp (1)
- dashcam (1)
- yantop (1)
- microservices (1)
- api-gateway (1)
- load-balancing (1)
- circuit-breaker (1)
- rate-limiting (1)
- scalability (1)
- ssh (1)
- sqlite (1)
- monitoring (1)
- ssl (1)
- nextjs (1)
- web-scraping (1)
- fintech (1)
- data-structures (1)
- diffie-hellman (1)
- key-exchange (1)
- modular-arithmetic (1)
- matrix (1)
- signals (1)
- programming (1)
- c (1)
- process-management (1)
- ecdsa (1)
- pki (1)
- hands-on (1)
- Published on
HTTPS keeps outsiders away from your traffic. But on a company laptop, the security software is not an outsider, and that changes things.- Published on
How I built Server Monitor - a self-hosted tool that watches a group of Linux servers over plain SSH, with nothing installed on them and no dependency on outside services - with AI-assisted development.- Published on
How I built The Board - a site that tracks fixed deposit rates across every bank and finance company in Sri Lanka, backed by a scraping pipeline, a FastAPI read API, and an admin panel for managing it all - with AI-assisted development.- Published on
My Yantop dashcam (sold as the Car DVR/Dash Camera Yantop) only lets you view the live feed through its own app. I used nmap, PCAPdroid and Wireshark to figure out what that app was actually doing on the network, and turned it into a script that opens the same feed straight in VLC - no app, no flashing, no root.