The private keys were so weak they could be guessed in under a second — and one of them was just the number 4.