Serving tech enthusiasts for over 25 years.

TechSpot means tech analysis and advice you can trust .

A hot potato: Security teams are dealing with two separate emergencies this week, and both go straight to the foundations of the web. The first is a certificate authority that shipped private keys anyone could guess. The second is a pair of critical PHP flaws that leaked before patches existed. Browsers fixed the certificate problem within hours. Everything else, from Linux servers to Docker images and IoT gear, needs someone to log in and patch.

Eight intermediate certificates issued by India-based certificate authority eMudhra were found to have private keys so weak they can be calculated from the certificates themselves. Those certificates chained to roots trusted by Chrome , Firefox , Safari and Windows, as well as by operating systems and countless software trust stores.…