News for hackers. Stuff that matters.
Re:Private key for *.xboxlive.com certificate disclosed by uxp on Tuesday December 08, 2015 @06:38PM (#10700677)
The current certificate that I can see on (star).xboxlive.com is valid between December 1st 2014 and December 1st 2016.

Is it common to issue a certificate for a year, but make it active for the previous year as well?

Re:Private key for *.xboxlive.com certificate disclosed by tennysonmach on Tuesday December 08, 2015 @06:41PM (#10700694)
I suspect that they need to worry about xboxes using default time settings.
Re:Private key for *.xboxlive.com certificate disclosed by blakeyrat on Tuesday December 08, 2015 @07:03PM (#10700820)
An Xbox One can easily sit on the shelf for 3-4, or even more, years before being sold. Not quite the typical use-case...
Re:Private key for *.xboxlive.com certificate disclosed by FireBeyond on Tuesday December 08, 2015 @07:50PM (#10701070)
Using your powers of divination, given that the platform has only just had its second birthday?
Re:Private key for *.xboxlive.com certificate disclosed by tedks on Tuesday December 08, 2015 @08:13PM (#10701190)
Probably entrail reading, which is more applicable to the games industry than divination. That, and the 30 years of console sales patterns to draw on.
Re:Private key for *.xboxlive.com certificate disclosed by blakeyrat on Friday December 11, 2015 @03:49PM (#10719896)
Huh?

Look, I guarantee there's a game shop in Small Town, USA, right now with more Xbox One consoles on their shelf than they'll sell in three or more years. And I guarantee you'll find "new in box" Xbox Ones on Ebay 8-10 years from now.

Even if Microsoft stopped producing new Xbox Ones this afternoon, it wouldn't magically make those ones disappear.

Re:Private key for *.xboxlive.com certificate disclosed by pwman on Wednesday December 09, 2015 @04:03AM (#10702657)
Heartbleed showed us that many certificate authorities reissue certificates from the original date they were first issued.