Furry Technologists

1314 readers

12 users here now

Science, Technology, and pawbs

founded 1 year ago

MODERATORS

Soatok@pawb.social

stefenauris@pawb.social

Microsoft signing keys keep getting hijacked, to the delight of Chinese threat actors (arstechnica.com)

submitted 1 year ago by stefenauris@pawb.social to c/tech@pawb.social

3 comments fedilink hide all child comments

Amazing really. This is what we mean by hackers, a well crafted and elaborate scheme that took advantage of multiple points to accomplish this.

you are viewing a single comment's thread
view the rest of the comments

[–] ignotum@lemmy.world 3 points 1 year ago

Watched a talk about a parabolic link that was supposed to provide secure point to point communication over long distances (think direct communication between two office buildings), it was either stated or heavily implied that the data was encrypted i don't remember

They did some testing and found that it used some standard frequency and protocol to send it, and it was just sending the ethernet frames as-is except with one change, they padded it with a single zero bit in the beginning and 7 at the end...

Once you knew this it was reasonably trivial to read everything going through the link, or to inject your own packets

Never trust companies to do security right