Re:Hacks Raise Fear Over N.S.A.’s Hold on Cyberweapons
by joe_the_user on Friday June 30, 2017 @03:39PM
(#14673173)
My gawd, Firefox is telling the iad's security certificate is broken. Now if there was ever a sign the world is going to heck, that would be it.
Re:Hacks Raise Fear Over N.S.A.’s Hold on Cyberweapons
by tripzilch on Saturday July 01, 2017 @07:08AM
(#14676553)
on this page they try to explain:
https://www.nsa.gov/what-we-do/information-assurance/
> Note: The IAD.Gov website uses TLS 1.2, supported by a Department of Defense (DoD) PKI certificate, to ensure confidentiality and integrity for all users. IAD.Gov website users will need to have the current DoD Root and Intermediate Certificate Authorities (CA) loaded into their browsers to avoid receiving untrusted website notifications.
I mean it still doesn't make sense ... Where it says "for all users" it should say "for those who have this certificate installed" because that's what the warning is about. And "to avoid receiving untrusted website notifications" should read "for a more secure connection" because, you know, what's the goal here, really? :)
Sounds like the IAD mission. Examples:
- https://github.com/iadgov/Pass-the-Hash-Guidance/blob/master...
- https://www.iad.gov/iad/library/reports/nsa-methodology-for-...
I mention that first one especially because Pas-The-Hash was a major reason the most recent ransomware outbreak was able to get onto already-patched machines.