[3330] in Privacy_Forum
[ PRIVACY Forum ] Adobe signing certificate compromised
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Thu Sep 27 18:38:37 2012
Date: Thu, 27 Sep 2012 15:18:41 -0700
To: privacy-list@vortex.com
Message-ID: <20120927221841.GC7146@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Adobe signing certificate compromised
http://j.mp/Qso7Uv (Adobe)
"We recently received two malicious utilities that appeared to be
digitally signed using a valid Adobe code signing certificate. The
discovery of these utilities was isolated to a single source. As soon
as we verified the signatures, we immediately decommissioned the
existing Adobe code signing infrastructure and initiated a forensics
investigation to determine how these signatures were created. We have
identified a compromised build server with access to the Adobe code
signing infrastructure. We are proceeding with plans to revoke the
certificate and publish updates for existing Adobe software signed
using the impacted certificate. This only affects the Adobe software
signed with the impacted certificate that runs on the Windows platform
and three Adobe AIR applications* that run on both Windows and
Macintosh. The revocation does not impact any other Adobe software for
Macintosh or other platforms."
- - -
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
- Data Wisdom Explorers League: http://www.dwel.org
- Global Coalition for Transparent Internet Performance: http://www.gctip.org
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren / Twitter: http://vortex.com/t-lauren
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
