Furry Technologists

1314 readers

12 users here now

Science, Technology, and pawbs

founded 1 year ago

MODERATORS

Soatok@pawb.social

stefenauris@pawb.social

Microsoft signing keys keep getting hijacked, to the delight of Chinese threat actors (arstechnica.com)

submitted 1 year ago by stefenauris@pawb.social to c/tech@pawb.social

3 comments fedilink hide all child comments

Amazing really. This is what we mean by hackers, a well crafted and elaborate scheme that took advantage of multiple points to accomplish this.

you are viewing a single comment's thread
view the rest of the comments

[–] SloanTheServal@pawb.social 6 points 1 year ago* (last edited 1 year ago) (1 children)

This is why everyone should take active responsibility for their own internet security instead of relying on companies to do it for them.

Locks stop opportunists. Anyone who's even remotely determined to get in is going to bring a lockpick. And anyone who's dead-set on getting in will just use bolt cutters. And digital locks are no different.

[–] ignotum@lemmy.world 3 points 1 year ago

Watched a talk about a parabolic link that was supposed to provide secure point to point communication over long distances (think direct communication between two office buildings), it was either stated or heavily implied that the data was encrypted i don't remember

They did some testing and found that it used some standard frequency and protocol to send it, and it was just sending the ethernet frames as-is except with one change, they padded it with a single zero bit in the beginning and 7 at the end...

Once you knew this it was reasonably trivial to read everything going through the link, or to inject your own packets

Never trust companies to do security right