Author: Manindra Simhadri
-
How to Check if You Trust eMudhra: Trust Stores and CT Logs
In the last post we saw how eight eMudhra intermediate keys were guessable in seconds, and how Mozilla and Chrome moved to distrust the emSign ECC Root CA – G3. A natural question after that is, “Am I affected?”. Before we dive deep, let’s understand there are two different places to look, and each answers…
-
eMudhra CA Incident: When the “random” keys were not random
In October 2026 a Certificate Authority called eMudhra got into serious trouble. Researchers found that private keys of eight of its intermediate certificates were so weak that anyone could guess them in seconds. Before we dive into what happened, let’s understand a few basics and then go through the incident. Topics we will be covering…
-
As a Security Engineer, what you need to know about ephemeral ports
What are ephemeral ports? Ports are used for sending and receiving data between devices, same like how ships use ports to send and receive goods. Now ephemeral ports are temporary ports that are used to send/recieve data. For commonly used services ports have port numbers associated for them for example SSH is port number 22,…
-
-
Top 10 Security tools every security engineer must know
I always emphasize tools are not everything but we need to know how they work, how tools are engineered and how they make our lives easier. Once you have the engineering understanding of how the tool is working you can take full potential of the same.
-
What is MDR?
MDR stands for Managed Detection Response. Its a type of Detection Response and before we dive deep into MDR let’s understand what is Detection Response and will discuss about MDR later in the post. Topics we will be covering this post
-
-
-
-
Xtreme Breakdown – Secure Hashing
What is the purpose of Hashing or what is the problem that it’s trying to solve? Let’s say you are trying to send a file from your device to your friend’s device and your friend would like to confirm whether the file you sent is the same file that is downloaded the same file or…