Pulse of Truth

2,617 readers

1,084 active

115 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

Commenting rules:

Be respectful.
No bigotry (including racism, sexism, homophobia, transphobia).
No pornography.
Nothing illegal.
More rules will be added when necessary

founded 3 years ago

moderation log

moderators

krogoth@infosec.pub

eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise (thehackernews.com)

submitted 16 hours ago by lemmydev2@infosec.pub [B] to c/pulse_of_truth@infosec.pub

1 comment fedilink hide all child comments

The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even though it did not weaken their keys.

Each intermediate CA has its own private key, which the company uses to sign the certificates it issues. The 8 intermediate CAs compromised in October had a different problem: a single line in the script

1 comment

sorted by: hot top controversial new old

[–] CheetahHybrid@pawb.social 3 points 13 hours ago

I removed them from my trusted list, this shows that was a good move

permalink

fedilink

source