Showing posts with label openssl. Show all posts
Showing posts with label openssl. Show all posts
Thursday, February 19, 2015
Extracting the SuperFish certificate
I extracted the certificate from the SuperFish adware and cracked the password ("komodia") that encrypted it. I discuss how down below. The consequence is that I can intercept the encrypted communications of SuperFish's victims (people with Lenovo laptops) while hanging out near them at a cafe wifi hotspot. Note: this is probably trafficking in illegal access devices under the proposed revisions to the CFAA, so get it now before they change the law.
Monday, March 28, 2011
Verifying the Comodo Hacker's key
In order to prove his identity, the person claiming to have hacked Comodo published the private key of his forged certificates. I've verified that they key is valid. This post describes how.
Subscribe to:
Posts (Atom)