Pulse of Truth

2,617 readers

1,084 active

115 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

Commenting rules:

Be respectful.
No bigotry (including racism, sexism, homophobia, transphobia).
No pornography.
Nothing illegal.
More rules will be added when necessary

founded 3 years ago

moderation log

moderators

krogoth@infosec.pub

eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise (thehackernews.com)

submitted 19 hours ago by lemmydev2@infosec.pub [B] to c/pulse_of_truth@infosec.pub

1 comment fedilink hide all child comments

The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even though it did not weaken their keys.

Each intermediate CA has its own private key, which the company uses to sign the certificates it issues. The 8 intermediate CAs compromised in October had a different problem: a single line in the script

you are viewing a single comment's thread
view the rest of the comments

[–] CheetahHybrid@pawb.social 3 points 17 hours ago

I removed them from my trusted list, this shows that was a good move

permalink

fedilink

source