News for hackers. Stuff that matters.

A comment on Let's Encrypt AUTHZ Reuse and Eternal Account Key. Parent comment

Re:Let's Encrypt AUTHZ Reuse and Eternal Account Key by dc352 on Tuesday October 25, 2016 @10:29AM (#12788277)
The difference is that I need to access your file system only once to get your account key. I need permanent access to exploit your automation.

Attackers can also scale revenues, potentially, by selling account keys to third parties.

[ Parent | on HN ]
Re:Let's Encrypt AUTHZ Reuse and Eternal Account Key by TheDong on Tuesday October 25, 2016 @11:23AM (#12788717)
For most types of automation they only need to access your filesystem once as well, but accessing the filesystem as root once also implies they can again (albeit at increased risk of detection).

Your second sentence is pure FUD imo.

[ Parent | on HN ]