News for hackers. Stuff that matters.

A comment on Response to Concerns Regarding eDellroot Certificate. Parent comment

Re:Response to Concerns Regarding eDellroot Certificate by INTPenis on Tuesday November 24, 2015 @03:31AM (#10619743)
If you worked for customer support then you know how much longer calls can take when people are looking for the service tag.

They were speaking for online support, where no support agent is available to guide the customer through finding the service tag.

I believe they had good intentions but it was very poorly executed.

[ Parent | on HN ]
Re:Response to Concerns Regarding eDellroot Certificate by junto on Tuesday November 24, 2015 @03:46AM (#10619783)
I'm an ex-Dell Support site web developer. This used to work using Java/ActiveX if memory serves me right. Since browsers have started to downgrade the whole Java experience, it appears that Dell now want you to download an EXE which you then have to install.

I really don't understand why they would need to install a root cert to make requests from a client's machine when you already have installed an EXE on the client's machine (which can basically do anything it wants).

Can anyone think of any genuine reason why an installed executable would need a CA root cert?

[ Parent | on HN ]
Re:Response to Concerns Regarding eDellroot Certificate by INTPenis on Tuesday November 24, 2015 @04:17AM (#10619859)
When it comes to leaving the private key on the client systems then I would have to refer to Hanlon's razor.

It could simply be a stupid mistake, social media make stupid mistakes into big deals but they're not a new phenomenon.

[ Parent | on HN ]
Re:Response to Concerns Regarding eDellroot Certificate by pheroden on Tuesday November 24, 2015 @08:10AM (#10620449)
No, but I sat across from them, and it never seemed to be an issue.
[ Parent | on HN ]