wildmXranat2 minutes ago
Someone should've coined this disaster as "QuattroFail" to give it a little panache and international mystery
shrubble19 minutes ago
If I’m understanding correctly, you could sniff the communication between your Smart TV and the manufacturer using this method?
kevin_nisbet11 minutes ago
Possibly. But some manufacturers may not have the full set of roots, use a private authority, or do certificate pinning.
quotemstr12 minutes ago
If the TV isn't older than a few years, if it's not checking CRLs, and if it hasn't yet patched itself.
seniorsassycat13 minutes ago
How much of a boon is this for jailbreaking, reverse engineering, and mitm really?
tecleandor30 minutes ago
This is gonna be great to sniff apps in a couple older Android phones I have around. Hope they're not pinning certificates.
skeledrew15 minutes ago
This is how fame happens.
sippingabonedry12 minutes ago
Wonderful.
Anyone else bother to notice iOS still trusts 2 of the forged certs on the test site? I'd like to politely know what the fuck is going on because this is far from being "fixed".
xuki5 minutes ago
Which iOS version? 27.0.1 here and they're all revoked for me.
snailmailmana minute ago
FWIW i havent updated my ios, I'm on 26.6.2, and they all got revoked for me. The revocation shouldn't require an iOS update.
DrammBA28 minutes ago
I love how someone's security disaster becomes someone else's feature.
xp8424 minutes ago
I agree. We may as well make some lemonade out of these lemons. IMHO the ability of companies to 'securely' close off hardware and software from their users is a sad casualty of the success of cryptography, and not a feature.
tonymet21 minutes ago
I seriously laughed at the flag. public wifi is going to be lit.