"Preventative measure" my ass. The security is already thoroughly broken.
Show this thread
Of course, they aren't admitting to it publicly. The question is how many countries, companies, and other users of Infineon chips are quietly sweeping ROCA under the rug and ignoring the fact that their security is now *utterly broken* until updated?https://twitter.com/marcan42/status/928171103607865345 …
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
As long as they’re working hard to find out which ones are affected and replacing them now, I’m fine with no communication until done.
-
So you're fine with them leaving all their users vulnerable to complete and utter impersonation until they manage to deploy a fix? The vulnerabiilty is public *today*, hackers don't wait until you're done with logistics.
- Show replies
New conversation -
-
-
I cannot disclose context, but I’m also affected with a card.
-
Someone is actually using SuisseID
? - Show replies
New conversation -
-
-
Also, remember the ROCA bug works both ways: it also destroys non-repudiation properties. I can simply sign something normally *today* with a vulnerable eID card, then claim tomorrow that I never signed it, someone must've factored my key.
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Welcome to Spain! That's the way our government do things...
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.