News for hackers. Stuff that matters.

A comment on Response to Concerns Regarding eDellroot Certificate. Parent comment

Re:Response to Concerns Regarding eDellroot Certificate by junto on Tuesday November 24, 2015 @03:46AM (#10619783)
I'm an ex-Dell Support site web developer. This used to work using Java/ActiveX if memory serves me right. Since browsers have started to downgrade the whole Java experience, it appears that Dell now want you to download an EXE which you then have to install.

I really don't understand why they would need to install a root cert to make requests from a client's machine when you already have installed an EXE on the client's machine (which can basically do anything it wants).

Can anyone think of any genuine reason why an installed executable would need a CA root cert?

[ Parent | on HN ]
Re:Response to Concerns Regarding eDellroot Certificate by INTPenis on Tuesday November 24, 2015 @04:17AM (#10619859)
When it comes to leaving the private key on the client systems then I would have to refer to Hanlon's razor.

It could simply be a stupid mistake, social media make stupid mistakes into big deals but they're not a new phenomenon.

[ Parent | on HN ]