TLS Certificates Hacked: Eight Fake Padlocks Put Internet on Alert
From the BBN segment “Eight compromised TLS certificates put the internet on high alert”, cut down to under a minute.
The full story and the real reporting behind it (Ars Technica) →
From the BBN segment “Eight compromised TLS certificates put the internet on high alert”, cut down to under a minute.
The full story and the real reporting behind it (Ars Technica) →
What BBN said on air. The facts are in the original report: Ars Technica.
Hank LedgerEight compromised encryption certificates have put the internet on high alert, Ars Technica reports, and anyone holding these keys could mint credentials for any website.
Dale BearmanIt's the little padlock in your browser, Hank. The one that says this bank is really your bank.
Dale BearmanNow somebody could print that padlock at home.
Hank LedgerSo the padlock can lie.
Dale BearmanBeautifully. And to prove the keys were real, the researcher signed a message with all eight: We have a problem here, Wayne.
Dale BearmanThat's according to The CyberSec Guru.
Hank LedgerEight signatures on a note that says there's a problem. Most polite alarm I've ever heard.
Dale BearmanAnd the browsers moved quickly. Chrome blocked them on October seventeenth, Apple followed on the nineteenth, and Microsoft on the twentieth.
Dale BearmanEvery website you've ever trusted, Hank, was one bad afternoon from being a stranger.
Hank LedgerHashtag Wayne.