Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.

all 9 comments

sorted by: hot top controversial new old
[–] 33 points 1 month ago

Oh, that's not good

  • source
  • [–] 23 points 1 month ago

    Welp. That's just about the worst

  • source
  • [–] 16 points 1 month ago (2 children)

    Attackers hijacked three top-level domains and used their control to mint counterfeit TLS certificates for Google and other large organizations, Google said Tuesday.

    The attackers launched a series of attacks on the .gh, .sl, and .as country code top-level domains (ccTLDs) and then modified authoritative DNS records for selected domains within those namespaces.

  • source
  • hideshow 2 child comments
  • [–] 8 points 1 month ago

    Christ in a bucket.

  • source
  • [–] 4 points 1 month ago*

    browser-side intervention should not be relied on to protect your users

    Uh huh, sounds like a pitch to have more unnecessary data on the servers side. Just disable JS on every website.

  • source
  • [–] 4 points 1 month ago (1 child)
  • [–] 4 points 1 month ago*

    Google is a big bully who knows everybody's secrets and likes to tell people what to think and what to do. Now someone tricked a costume shop into making them a high quality Google costume in which they can walk around do some of the bad things Google does. It will take some time until all of us have been warned of that impostor and we can at least be sure again who's bullying us.

  • source
  • parent
  • 1 comment in c/technology@lemmy.world view that post
    [–] 4 points 1 month ago

    Likely not a worry unless you live in Ghana, Sierra Leone, or American Samoa

  • source