The Phuctoring
There's a total of 203 RSA moduli that have been factored to date. Among the more notable sounding keys :
Nancy Laubenthal <[email protected]> ; Alexander O. Yuriev <DataLink BBS SysOp>; Sandip Bhattacharya <[email protected]>; Vincent Thenhart <[email protected]>; Robert L. Vaessen (MobileMei key generated with gpg) <[email protected]>; debian.sur5r.net Archive Automatic Signing Key (sur5r) <[email protected]>; Piraten | Martin Letzel <[email protected]>; Apple Product Security <[email protected]>; Andreas Heimann <[email protected]>; Andreas Winkelbauer <[email protected]>; PGP Corporation Update Signing Key; <[email protected]>; Michael Starck <[email protected]>; Stephan Urbach <[email protected]>; Herr Urbach <[email protected]>; Carsten Lenz <[email protected]>; H. Peter Anvin <[email protected]>; H. Peter Anvin (hpa) <[email protected]>; H. Peter Anvin <[email protected]>; Eric Henry <[email protected]>; Eric Henry <[email protected]>; Eric Henry <[email protected]>; Eric Henry <[email protected]>; Richard Monk <[email protected]>; PGP Global Directory Verification Key;
along with various university and personal accounts. The list is, obviously, not exhaustive.
This find exposes significant vulnerabilities in the OpSec practices of each and every organisation or institution mentioned. The Pirate Party, German users, something calling itself "The PGP Corporation", the FSF and Apple particularly badly hit.
Phuctor will continue as a free, open and public service in the indefinite future. Feel free to verify your future keys against the ever-growing database. Special thanks to Mr. D. J. Bernstein for refinements to the algorithm that allowed us to reduce the required workload considerably.ii
———- Pointing to futher vulnerabilities in the MobileMe Apple scam. [↩]
- Phuctor now checks a database of almost two million keys in less than twenty minutes. [↩]
Saturday, 30 April 2016
205 lol
Saturday, 30 April 2016
Well yeah I expect it'll keep growing :)