An October 23, 2026 post in r/xkcd, titled “Updated 2026,” revisited the famous drawing of the internet balanced on a precarious stack of dependencies. The replies wandered from sharks and Jenga to an almost absurd question: where is the number 4? That last reference points to a real certificate-security incident reported earlier in October.
The original joke: an entire internet on one tiny project
xkcd #2347, “Dependency,” depicts modern digital infrastructure perched on a tiny project maintained, in the comic’s fictional setup, by an unthanked person in Nebraska since 2003. The point is not to identify a real Nebraska resident. It is to make invisible maintenance work suddenly, terrifyingly visible.
The Reddit post presents itself as a 2026 update to that joke. Its image was not directly inspected for this article, so details about precisely which logo sits where are not presented as firsthand observations. The public discussion, original comic and independent reporting provide the verifiable parts of the story.
Three ways the comments improved the punchline
The missing number 4
One commenter literally asked “where 4.” In a separate, documented incident, eight intermediate certificate-authority keys associated with eMudhra were found to be recoverable from integers smaller than 256. One private key really was 4. The issue was reported on October 17; the affected certificates were revoked or blocked, and eMudhra announced on October 22 that it was leaving its international website-certificate business. This was not somebody choosing “4” as their personal account password. The problem concerned keys used in the web’s certificate trust system.
The comedic collision is almost unfair: engineers spend years discussing enormous numbers, and the audience is suddenly handed the answer from a child’s arithmetic worksheet. The fictional meeting below is a joke, not a claim about what engineers actually said.
Jenga as an infrastructure audit
In the thread, a user responded to a discussion of the tower’s supports with a remark about having played enough Jenga. That is an excellent mental model for the picture. There is one major difference: when your family’s Jenga tower falls, you can still search online for the rules. If the internet’s tower falls, even the rulebook might be standing on it.
The remix becomes a dependency problem itself
Another commenter complained that these edits had turned into a contest to cram the most logos into the picture. Someone attempted to reproduce a related diagram with text, prompting a complaint about Reddit’s broken-looking monospace rendering. The drawing about fragile infrastructure was now relying on a fragile way of drawing. A shark-and-undersea-cable joke also surfaced; it was a cultural reference, not a verified shark incident on that date.
Original sketch: emergency structural inspection (fiction)
Inspector: “What holds the internet up?” Engineer: “A tiny volunteer-maintained project.” Inspector: “And the backup?” Engineer: “Cloud services, cables and four.” Inspector: “Four what?” Engineer: “Just four.” Inspector: “Please email me the safety report.” Engineer: “The email service is on the top floor.”
The payoff
The 2020 xkcd comic mocked how much the world depends on unseen maintainers. The October 2026 thread added a real tiny key, Jenga expertise, cable-chewing sharks and a complaint about the meme’s own overloaded architecture. The most fitting final addition to the tower might be the comments section arguing over how to draw it.
References (4)
- Reddit, r/xkcd, “Updated 2026,” posted October 23, 2026; public replies checked October 25: https://www.reddit.com/r/xkcd/comments/1xdhl39/updated_2026/
- xkcd, comic #2347, “Dependency”: https://xkcd.com/2347/
- Reuters, October 22, 2026, on eMudhra’s exit: https://www.reuters.com/legal/litigation/indian-firm-emudhra-exits-global-digital-certificates-business-after-2026-10-22/
- ctlogs.dev, October 2026 incident timeline, checked October 25: https://ctlogs.dev/blog/emudhra-ca-compromise
