Explained: How eMudhra was compromised

Before your banking app sends your password, your phone checks a document vouched for by one of about a hundred companies you’ve probably never heard of which say, “yes, go ahead and enter your password, it truly is your bank that it’s going to”. On October 17th, someone found that one of them, an Indian company called eMudhra, had a private key of the number “4”. I made a video on how the chain of trust works and how this mistake happened, and what to do prevent it.