[4191] in Privacy_Forum
[ PRIVACY Forum ] Attackers sign malware using crypto certificate
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Wed Jun 26 21:23:37 2013
Date: Wed, 26 Jun 2013 18:06:38 -0700
To: privacy-list@vortex.com
Message-ID: <20130627010638.GC23762@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Attackers sign malware using crypto certificate stolen from Opera Software
http://j.mp/11JqQ1l (ars technica)
"Opera's advisory leaves out key information that makes it hard to
assess just how much damage was done. Missing details include when the
attackers first gained access to the servers, precisely when the
stolen digital certificate expired, and whether there's reason to
believe other certificates may also have been obtained. It would also
be useful to know how hackers got access to an official Opera digital
certificate, which is supposed to cryptographically prove that the
software that bears its seal could only have come from the company. As
Ars reported last year, companies such as Symantec go to great lengths
to secure such keys, although Opera is hardly alone in losing control
of such a valuable certificate."
- - -
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
- Data Wisdom Explorers League: http://www.dwel.org
- Global Coalition for Transparent Internet Performance: http://www.gctip.org
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren / Twitter: http://vortex.com/t-lauren
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
