PITY THE cyber-defenders. Occasionally, the industry must burst into action(迅速行动起来) following the unheralded(未事先预告的) revelation of a vulnerability(漏洞；脆弱性) in some widely used software. Rarely, however, must they do so several times in the same week.(然而，他们很少需要在同一周内这样做上好几回。)
网络安全卫士们真值得同情。偶尔，某个广泛使用的软件被曝出漏洞，整个行业就得紧急行动起来。但一周之内要这样折腾好几回，实属罕见。
On October 20th the security teams at major web browsers received an unusual email. It read “we have a problem here” and was accompanied by a file containing eight private security keys: randomly generated numbers used to encrypt(加密) communications across the entire internet. Such keys should be 116 digits long to ensure security. Those in the email, originally issued by an Indian authority, were no longer than three.(邮件中的那些密钥最初由印度一家机构签发，长度不超过三位。) One was a private key(私钥) of just “4”. To top things off, the email was signed simply “Wayne”.
10月20日，各大网页浏览器的安全团队收到了一封不寻常的邮件。邮件写道“我们这儿有个问题”，并附有一个文件，内含八把私人安全密钥——用于加密整个互联网通信的随机生成的数字。这类密钥本应有116位数字长以确保安全。而邮件中的这些密钥由印度一家机构签发，长度不超过三位。其中一把私钥竟然只有“4”。更绝的是，邮件的署名只有“Wayne”一个词。
Revoking such keys from important central databases is manageable. Checking every system has updated accordingly is hard work. Major web browsers keep their blacklist(黑名单)s up-to-date(最新的；及时更新的), but many internet-connected systems do not adjust so easily. Some, like many Linux systems, require an active software update; others, like some command-line tools on MacOS, must be manually fixed.(有些系统（如许多Linux系统）需要主动进行软件更新；另一些（如MacOS上的一些命令行工具）则必须手动修复。)
从重要的中央数据库中吊销这些密钥尚可应付。但要检查每个系统都已相应更新，则是件苦差事。主流网页浏览器会及时更新黑名单，但许多联网系统并不能如此轻松地调整。有些系统（如许多Linux系统）需要主动进行软件更新；另一些（如MacOS上的一些命令行工具）则必须手动修复。