Allowing easy forgery of TLS certs wouldn't be enough to get your attention? OK...
-
-
But in this way it should be possible to spoof Windows Updates packages signatures, thus obtaining a good way to perform RCE. Maybe I'm missing something?
-
Authenticode bugs are real issues, but nowhere near enough enough to justify a hype train, we get bigger bugs than that every patch Tuesday. This is not limited to code signing, and therefore I think a little hype train can be forgiven.
- 2 more replies
New conversation -
-
-
I’m hoping it affects Xbox, because that would be quite fun to mess with.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.