OpenChaos.dev is an experiment where the most upvoted pull request gets merged every day.
Today’s winning PR added a 1.337% chance of serving a blank page.
And Vercel, doing exactly what it’s supposed to do, cached it.
So a probabilistic failure became a permanent outage.
Regarding Sicarii’s broken decryption process, researchers said that “during execution, the malware regenerates a new RSA key pair locally, uses the newly generated key material for encryption, and then discards the private key.”