fwiw the posts going round saying that the cert key fuckup was due to a HSM bug are wrong. they used a HSM to generate the keys, and the HSM generated them correctly. they then did a "process deviation" (read: someone signed off on doing a little fucky boingo) and used a script to process the signing requests, which fucked up and made the keys all tiny.
[source: the emsign people in the bugzilla thread, which wasn't private earlier but now seems to be, womp womp]
Graham Sutherland🎃 / Polynomial.pdf.exe
npub1sz…7t4fx
2026-10-21 04:31:33 UTC
Author Public Key
npub1szz2a5n67z8nfx2s5z87xqk5znexu3kfdmprq5cqva8g0gdd8snq07t4fxSeen on
wss://relay.momostr.pinkPublished at
2026-10-21 04:31:33 UTCEvent JSON
{
"id": "10730ccf1be65fdfb060ce39fb6376215fce2df96ed9d3cfe3d5358ef06d2498",
"pubkey": "8084aed27af08f349950a08fe302d414f26e46c96ec2305300674e87a1ad3c26",
"created_at": 1792557093,
"kind": 1,
"tags": [
[
"proxy",
"https://chaos.social/@gsuberland/117477021703257745",
"web"
],
[
"proxy",
"https://chaos.social/users/gsuberland/statuses/117477021703257745",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://chaos.social/users/gsuberland/statuses/117477021703257745",
"pink.momostr"
],
[
"-"
]
],
"content": "fwiw the posts going round saying that the cert key fuckup was due to a HSM bug are wrong. they used a HSM to generate the keys, and the HSM generated them correctly. they then did a \"process deviation\" (read: someone signed off on doing a little fucky boingo) and used a script to process the signing requests, which fucked up and made the keys all tiny.\n\n[source: the emsign people in the bugzilla thread, which wasn't private earlier but now seems to be, womp womp]",
"sig": "77d9b76f8d3b6e2adf2973e419ee91d1f983dc3a544ecc349b894b00b1868b8425ba20d3b041f05f91405b529ba7b3f3f64b2cf4929ae78fb4c41d088b59eff3"
}