2076 stories
·
3 followers

The Internet goes on high alert after discovery of 8 compromised TLS certs

1 Share

Security personnel around the world are on high alert Tuesday following the discovery of eight TLS certificates with private keys so weak they could allow anyone to mint trusted browser and app credentials for any site on the Internet.

As of late morning Tuesday, browser makers and some major apps and programming languages had blocked all eight of the intermediate certificates. There are no reports of certificate transparency logs, which track the issuance of all browser-trusted certificates, showing the compromised keys being used maliciously. The threat remains far from over, however, because it will be hard and time-consuming to update other key parts of the Internet, such as Linux distributions and embedded and Internet of Things devices.

One word: bonkers

The eight intermediate certificates belong to India-based certificate authority eMudhra Limited. An informal advisory published to emudhra.we-have-a-problem.com over on Tuesday posted the message “We have a problem here - Wayne.” The words were digitally signed using the private key of one of the eMudhra certificates. With proof that the reporting party had control of the key, defenders scrambled because the same key could be used to sign unauthorized certificates that would be trusted by millions of servers worldwide.

Read full article

Comments



Read the whole story
mrmarchant
38 minutes ago
reply
Share this story
Delete

Why Wikipedia is a Wonder of the Modern World—That We’ll Never See the Likes of Again

1 Share
wikipedia

At the very top of the Wikipedia article “List of artificial objects on the Moon” is a short disclaimer: Though the list includes more than a hundred objects, it is far from complete. Not included are the “lesser” items littering the lunar surface—­the pins, statues, golf balls, plaques, hammers, and memorials that moonwalkers have left behind. Among them is an object called the Lunar Library. It is a kind of ark, designed to preserve an everlasting cultural memory of human civilization. Etched onto a sheet of nickel, in a nano-­font so minuscule it can be read only through a microscope, are the complete texts of thousands of great written works from across the ages. Near the top of this final testament of our species is an English-­language edition of Wikipedia, the encyclopedia anybody can edit.

Unlike the paper Bible left behind by NASA moonwalker David R. Scott in 1971, the Lunar Library’s form is impervious to gamma radiation and expected to last billions of years. For Wikipedia, being engraved into eternity represented a triumph long delayed. In 2007, it had become the largest encyclopedia ever to exist, ending the reign of the imperial Chinese Yongle encyclopedia after six hundred years. Some called it the first digital wonder of the world, yet it had reached this milestone to meager fanfare. Tributes were muted, and the lone statue monumentalizing its achievement little known, as it stood, for some reason, in the Polish border town of Słubice (pop. 16,000).

So when in 2018 a private moon lander named Beresheet ferried the Lunar Library into orbit, it was an elevated honor in an unusually literal sense. The craft’s languid two-­month flight path ended above the moon on April 11, 2019, where it took only a few seconds for seven years of planning to come undone. Beresheet lost contact with its faraway pilots and then dropped through the thin atmosphere, crashing with such force that a glittering nickel disk was flung far across the face of the Sea of Tranquility. The Lunar Library had, in the words of its creator, been turned into a “30 million page Frisbee.” It has never been seen since.

Wikipedia is sui generis, one of the strangest and most outlandish successes of its time, quite unlike what came before it or anything set to succeed it.

At first this bungled tribute seemed another letdown for Wikipedia. But it was, in its way, perfect. The Lunar Library’s unscheduled final flight was a sympathetic homage: unpredictable, chaotic, impervious to control, and more far-­reaching than anyone expected. Wikipedia is sui generis, one of the strangest and most outlandish successes of its time, quite unlike what came before it or anything set to succeed it. Since its birth twenty-­five years ago, it has become part of the fabric of everyday life, quietly indivisible from the experience of seeking information, a default with no obvious precedent or competitor. For most of its lifespan, it has enjoyed a unique supremacy—­not only an encyclopedia, but the encyclopedia, a reference work to end all others.

Though Wikipedia has been consulted trillions of times and read by billions of people, very few of those billions know how it works or where it came from. One of Wikipedia’s many perplexing qualities is the lack of curiosity it provokes. Even those broadly enthusiastic about the encyclopedia sometimes donate money to “pay for the fact checkers,” unaware that it doesn’t have any, or at least not any who are paid. Its public image is intertwined with Wikipedia’s figurehead, Jimmy Wales, in part because pictures of his plaintive face so often accompany appeals for those donations. The face is assuring, kindly, bearded. Wales once compared reading Wikipedia to eating a sausage: “you might like the taste of it, but you don’t necessarily want to see how it’s made.”

Here is part of the paradox that made Wikipedia possible. Its vast scale and reach sprang from an experiment that was radical and even shocking when it was first attempted. Rather than restricting the creation of knowledge to luminaries and experts, it entrusted anyone who wanted to participate, and then let them work how they wanted to. Its status as “the people’s encyclopedia” violated the hierarchy of expertise that preceded it, and still, a quarter-­century on, Wikipedia has never quite shaken that first flush of the ridiculous. “Everybody distrusts Wikipedia and everybody uses it,” a cynic once remarked, a reality that held for years. A natural countertendency has formed, especially among its fans, to insist the project be taken more seriously. But that ridiculousness should be appreciated. It had a valuable protective function: Had anyone predicted Wikipedia’s true value during its formative phase, it would never have survived.

This lack of curiosity might explain the scarcity of nonacademic books about Wikipedia. Some of this is prejudice, too. For a time, many writers and journalists disdained Wikipedia as a way of burnishing their own credentials as professionals. They feared—­rightly—­what might happen if it failed, and when it did work, they fretted that it was working too well. Gather the titles about Amazon, Google, and the other phenomena that define the online world, and together they can cram a bookshop. Wikipedia can barely fill a shelf, and its early period as a “startup” is even less represented. As the lone nonprofit enterprise among its peers, Wikipedia’s story doesn’t belong in the business section. There are no financial numbers to set the stakes, and its cast of characters, with rare exceptions, includes neither executives nor employees. Though a habit of mind places it next to the titans of Silicon Valley, it stands awkwardly apart (this is apt; it didn’t come from Silicon Valley either). It shares the narrative arc of a comedy instead, one of those 1980s comedies where the nerds and misfits beat the rich kids in the big game, although in this big game, the “rich kids” were nerds and misfits too.

Reflect further, and Wikipedia may not belong in the “tech” section either. It is not a technological miracle, at least not in the way a smartphone is. The software that makes it run is well regarded without being revolutionary. Its most important breakthroughs were cultural breakthroughs. Look again at the Lunar Library, and you can see that Wikipedia is an uncanny object. It is vast and tiny at the same time. Its entirety, both text and images, can fit onto a $5 thumb drive. Look it up in Jack Lynch’s history of reference works (called You Could Look It Up: The Reference Shelf from Ancient Babylon to Wikipedia), and Wikipedia’s page count is listed as “zero,” and its size and weight are marked as “none.” Wikipedia has non-­Newtonian properties. It is monumental while having almost no distinctive physical presence at all, a confounding effect that makes it hard to appraise. It is both too big to understand and somehow too ephemeral to bother trying.

Why try now? The remedial answer would be to say that we should know how it works and where it came from and that this has now become urgent: Thanks to artificial intelligence, more people are using Wikipedia unknowingly than ever before. Delve further, and we strike a more unexpected question. What is Wikipedia? Not everyone agrees it is an encyclopedia, and it is so distinct from everything else called an encyclopedia that it deserves a new name. It could, with justification, be called a hyperpedia, or a massively multi-­editor online encyclopedia. But there is no need for new jargon: the word “wikipedia” is itself a coinage, a portmanteau of “wiki” and “encyclopedia.” The word marries two inventions, one from the eighteenth century and one from the twentieth. A modern encyclopedia compiles summaries of knowledge; a wiki is a page on the internet that can be edited by anyone. Each is much more powerful than it first appears. Combining them turned out to be one of the twenty-­first century’s most consequential ideas, and one that is still not fully understood or appreciated.

Wikipedia is not only the largest encyclopedia written by humans. It is also the last encyclopedia humans will ever write.

Wikipedia is also an event, a phenomenon in time. It is an act of collective cultural creation—­the largest act of this kind in history—that was tightly concentrated between 2001 and 2008, when the present-­day form of the project took shape. The conclusion of this period can be identified—­it is the moment Wikipedia’s growth rate, once exponential, became linear. We still tend to use the term “digital era” in a hazy, ballpark sort of way, a vague gesture to the number of computers around the place, although the true shift is much sharper. Sometime in 2002, the quantity of digital information in existence overtook the quantity of analog information in existence. It is not a coincidence that the birth of Wikipedia sits at the very center of this process, one of a new breed of informational behemoths.

It is just this critical period where the contemporary coverage of Wikipedia is thinnest. Because it was considered unimportant when it started, crucial moments had little media interest or were neglected outright. Controversies remain unresolved, key figures forgotten, and central strands of its origin story underestimated or ignored. Like any encyclopedia, Wikipedia is also a written work and remains deeply underappreciated as a landmark in the history of writing, reading, and editing. Once seen as a literary production of enormous size, it also turns out to have a hidden pedigree in the humanities.

It might sound pretentious to call Wikipedians heirs to Voltaire, Diderot, and Leibniz (especially if they were listening to Insane Clown Posse at the time), but this turns out to be true in a profound way. Not only do philosophy, literature, and history play a part in this story, but so do less expected influences like architecture and poetry. At a time when the humanities are in eclipse, these legacies are more precious still. They are also responsible for one of Wikipedia’s most unheralded qualities—­its beauty. Out of the crooked timber of Wikipedia’s imperfections, wonder has been made. The same distortions that seem squalid or irritating can also make grandeur; Annie Rauwerda, who runs the popular social media account Depths of Wikipedia, compared this sensation of appreciation to stumbling on “abandoned cathedrals.”

Already it is the beauty of something fragile. Younger people only know the encyclopedic form at all because Wikipedia has sustained it. Loss defines the digital age just as much as abundance: Of all the data created in 2020 (a very large proportion of the data that has ever been created), less than 2 percent was saved and retained into 2021. In 2014, the BBC reported that online history was disappearing with breakneck speed, creating what it called “a black hole for future historians.” Reach out to corroborate something from only a few years ago, and often it turns out to be deleted, or corrupted, or trapped on a lost disk in a half-­forgotten format. Recent history can feel more remote than the paperbound past that preceded it. Meanwhile, the memories of the people who made Wikipedia, though fading, can still be accessed.

Wikipedia is not only the largest encyclopedia written by humans. It is also the last encyclopedia humans will ever write. Thanks to artificial intelligence, we must apply the new description “human-­authored” to Wikipedia, and the circumstances that created it have foreclosed. It is an escapee from a parallel universe, a refugee of the internet as it should have been, instead of the internet as it is. We associate size with strength, but it can introduce weakness as well. Wikipedia could yet drown in a tidal wave of AI slop or be overshadowed by computer-­composed encyclopedias of even more unfeasible size. Experiments are already trying to bring such monstrosities to life. Less dramatic ends await Wikipedia too—­being broken up into parts or withering through neglect as audiences encounter it in places where it can be read, but not edited. After years of noncombatant status in the culture wars (occupying the no-­man’s-­land between “trust the experts” and “do your own research”), it has attracted new attention from dangerous political enemies, foreign and domestic.

Digital empires, once fallen, leave few ruins. Wikipedia might not be glittering or extraterrestrial, but this is my attempt at preservation. A means to say: we saw it made, and it was good.

_______________________________

The Last Best Place on the Internet

Excerpted from The Last Best Place on the Internet: A Human History of Wikipedia by Richard Cooke. Copyright © 2026 by Richard Cooke. Used with permission of the publisher, W. W. Norton & Company, Inc. All rights reserved.

Read the whole story
mrmarchant
10 hours ago
reply
Share this story
Delete

Have You Been to the Sixth-Worst McDonald’s in America?

1 Share

There is virtually no way I could have resisted Sylvie McNamara’s dispatch from her journey to a disreputable McDonald’s in Stafford, Virginia. I’ve listened to my share of the Doughboys podcast, and regularly debate burger rankings with my son. What’s more, I went to high school just two miles down the road from this particular location, whose aggregated Google reviews won it dubious distinction in a nation of interchangeable fast-food franchises. Thankfully, McNamara’s lighthearted investigation, which invites readers to consider Robert Caro and teenage commitments to the social contract, will satisfy you no matter your relationship with the Golden Arches. It reminded me of tongue-in-cheek alt-weekly features, a few pleasurable Paris Review web essays, and that episode of Mystery Show where Starlee Kine goes deep with a Ticketmaster employee. Ba-da-ba-ba-ba, I loved it.

I asked the employee for an explanation. “I think I can give you real insight,” he said. “It be the certain workers we got.” He himself is a high schooler, but he said that “we’re starting to get more younger managers. As soon as they turn 18, they’re getting a manager spot. I think my general manager’s 20. It’s a lot of kids getting these manager titles and positions, but they’re not really managers.”

I told him that to be honest, that environment sounded kind of fun.

Read the whole story
mrmarchant
10 hours ago
reply
Share this story
Delete

Updating My Grading Policy Because You're All Using AI All The Time

1 Share

WHEREAS, a grading policy should help us focus our energy—yours and mine—in the direction of your learning;

WHEREAS, we can both be grown-ups here and admit that students are using AI all the time to complete their homework;

WHEREAS, student AI use results in greater homework completion but lower assessment scores a/k/a less learning;

WHEREAS, students understand all of this, with a majority of them quite aware that their AI use harms their learning;

WHEREAS, students are in a prisoner’s dilemma with one another, each one competing for finite college admissions, finite grades on a curve, finite jobs, each student debating the pros and cons of either turning in their own work and learning more (at the risk of a lower grade) or turning in AI output and getting a higher grade (at the risk of an academic integrity sanction);

WHEREAS, this relationship between teachers and students is really quite poisonous, with both sides locked in an arms race—teachers working to detect AI in ever more sophisticated ways (keystroke logs!) and students responding with ever more sophisticated evasions (keystroke simulators!);

BE IT RESOLVED, exams will count for 80% of your final grade. These will be taken in-class and without the assistance of AI;

BE IT FURTHER RESOLVED, homework is worth 20% of your final grade and will be graded on a complete / incomplete basis only. Any submission that meets the minimum requirement will receive a complete score;

BE IT FURTHER RESOLVED, you may use AI in any capacity on homework. If you copy and paste the assignment into an LLM and turn in the result, you will receive a score of “complete,” no questions asked;

BE IT FURTHER RESOLVED, you will tell me if and where you want my feedback. Neither of us benefit when I give your LLM feedback. Both of us benefit when you help me invest my energy in the places where you have invested your developing knowledge, skill, and taste. Point me towards those places. If you primarily or entirely used AI to complete your homework, consider attaching your LLM prompts. They are a useful indication of your learning and I will be happy to try to develop them through my feedback. I’m certain I will learn a lot from them as well.

If you have any questions or feedback on this grading policy, please leave them in the comments below.

Thanks for reading! Toss your email in the box to receive a new post about teaching, math, and technology on special Wednesdays. -DM



Read the whole story
mrmarchant
1 day ago
reply
Share this story
Delete

Immensely Questionable Tests

1 Share

I have finally become a queen — though only in a research paper. In Immensely Questionable Tests, I am Queen Tanya, and my ten PRIMES STEP student coauthors are my sages.

The project began with a probability puzzle from Mathematical Puzzles and Curiosities, my book with Ivo David and Yogev Shpilman. Here I present an equivalent version, without probabilities, to match our project.

Puzzle. How many correct answer choices are there?

a) 1    b) 1    c) 2    d) 2

The intended answer is 2: exactly two choices say 2. So far, so good. Now erase one of the 1s. How many correct answer choices are among a) 1, b) 2, and c) 2?

Now 1 appears once and 2 appears twice. Either value can be an answer. But calling all three choices correct would require the answer to be 3. What is going on here?

We restrict the answer choices to positive integers. We call a value m valid if it occurs exactly m times among the choices. Now we can discuss valid answers without getting into paradoxes.

Our first paper Self-Referential Tests counts tests with valid answers as a function of the cost, defined as the sum of all test options. The paper answers many questions related to different types of tests. For example, what is the cheapest test with k distinct valid values? The cheapest such test uses one 1, two 2s, and so on, through k copies of k. Its cost is 12 + 22 + … + k2. For three distinct valid values, the cheapest test is 1, 2, 2, 3, 3, 3, costing 14.

Our second paper, Immensely Questionable Tests, mentioned at the very start of this essay, deals with the paradoxical nature of such tests.

For example, consider a test with these options:

1, 2, 2, 3, 3, 3, 3, 4, 4, 4.

The valid values are 1 and 2, accounting for three options. This tempts us to say that the correct answer is 3. But there are four threes on the test, suggesting that the correct answer should be 4 instead. And there are three fours, taking us back to 3. We are going in circles! It is surprisingly difficult to decide which answers should be called correct. We were not able to agree on the answer. So we turned our confusion into a story about a queen and her sages. Ironically, even in a fairy tale, I keep teaching people mathematics.


Share:Facebooktwitterredditpinterestlinkedinmail
Read the whole story
mrmarchant
2 days ago
reply
Share this story
Delete

Death & Domains

1 Share

A recent piece on “forever domains” sparked bigger questions about permanence online: when domain owners die out, do we need new systems that don't rely on domains at all?

Death & Domains

Should domains last forever? That’s not a new question for me, but it’s one that I’ve been thinking more about lately, especially since I ended up writing a story recently that posed this exact question.

Over at the new publication GraveSite, which covers the concept of death and grief with a reporter’s eye, I posed a question I’ve thought a lot about over the years: How can you keep a person’s digital identity alive even if their physical identity is long gone? For corporate entities this is actually reasonably easy—succession plans and all that, ensuring someone is paying the bills long-term.

But people aren‘t corporations, and business structures like domain registrars and web hosts often treat us as consumers. Which means that when we aren’t around to consume, and to pay money in exchange for that consumption, we’re going to be the first to lose our digital plot in the ground. There’s no internet cemetery, and we have a relatively limited number of archives that can hold our digital histories.

Which means that, when we go offline, so will our digital identities, eventually. It’ll take longer, but that credit card isn’t going to pay for itself. If you’re a writer or creative, this is a real risk, and the answers for solving this simply aren’t very good.

My piece goes over some of the novel solutions out there, including a nonprofit initiative to essentially take ownership of websites and pay the bills in your absence.

I’m happy with the piece, but don’t want to spoil it, so I’ll simply encourage you to read. But I wanted to spend a second thinking about a the second-order effects of this: If domains last forever, at what point do we need to start over?

jernej-breznik-Yji-AlsZpHU-unsplash.jpg
You might save a loved one’s artifacts in a box like this (or maybe even a nicer one). Should you have a similar kind of package for their digital data? (Jernej Breznik/Unsplash)

This was an argument I heard from a couple of readers about this topic. There’s a finite number of domains—at what point are the domains already here going to crowd out people that left a long time ago. I own the domain erniesmith.net that I use to promote my freelance work; if I decided to sell it to a service that aims to keep a domain around “forever,” am I screwing over later generations of Ernie Smiths?

It’s hard to say, but I do think it speaks to a longer-term architecture problem that the internet will eventually face, a crossroads as our domain owners die out, the domain maybe not being relevant anymore but their websites certainly having some value. And maybe the solution to this problem is to create new systems for distributing information online that don’t necessarily rely on domains.

One commenter on my post, Alex Russell (a former Google Chrome engineer now working on Microsoft Edge), pointed to the idea of Web Packages, a concept where websites could be distributed in full without the need for any attached domain or even expected online access.

It was an idea that originated with the Chrome team, but found little to no uptake with other browser-makers, eventually falling into the abyss of Web standards obscurities. (The project currently lives with the Web Incubator Community Group (WICG).) It arguably deserves to be revisited as the problem of dead websites and dead owners becomes a bigger problem. For one thing, it helps to resolve some of the bigger, more annoying problems with old websites—that they’re often required to be static when they’ve fallen into disuse, that they often don’t support https like modern sites do, and that they can carry latent security issues, much like how an old book can grow dust and mold if not managed properly. (In fact, one of the listed uses for web packages is to create an easy-to-distribute format for researching security exploits.)

Should the domain system itself be seen as temporary? Should we treat old websites more like books whose volumes can be picked up at will when all is said and done? That’s a provocative idea, and one that I think deserves more discussion in the current climate.

But one thing I’ll say is that our system is completely upside down if your website stands a better chance of being around in 100 years if it’s a Facebook profile or a forgotten Blogger or LiveJournal site than if you put in the work to carefully put it on the internet yourself.

Anyway, I look forward to talking about these issues with the GraveSite team on October 27, when I’ll be taking part in their HellFireside Chat on digital death. If this topic at all appeals to you, hope to see you there.

Domain-Free Links

As the Mullenweg turns: Get ready for some drama, folks. Fortune has a feature explaining what, exactly, happened with Matt Mullenweg last month when he very briefly was booted from his CEO role with Automattic. As you might guess, it has to do with the ongoing WP Engine mess.

A quick shout-out to friend of Tedium Sean Malseed, a.k.a. Action Retro, who publicly discussed his health issues with his audience. That stuff isn’t fun, and he’s not all the way through it, but I’m glad he’s still with us. After all, someone needs to put Haiku on a toaster, and I’d prefer if he did it.

Tying to my prior discussion of ArtCraft, I think that the rising trend of reverse engineering of technology you already own is a good thing, especially when it counters ugly corporate practices. Smart TVs, as highlighted by 404 Media, are an excellent starting point here.

--

Thanks to the team at GraveSite for letting me write about this important issue. (You should definitely subscribe if the topic of death is one that you find interesting.) Wanna share this piece? Here’s a quick link.

By the way, we just gave the Tedium Shopping Network an infusion of fresh products. Curious? Give it a look.

Top imaga via Depositphotos.com

Read the whole story
mrmarchant
2 days ago
reply
Share this story
Delete
Next Page of Stories