News for hackers. Stuff that matters.

A comment on Chrome 68 will mark all HTTP sites as “not secure”. Parent comment

Re:Chrome 68 will mark all HTTP sites as “not secure” by Sephr on Friday February 09, 2018 @02:03AM (#16338464)
Devices that run for 20 to 30 years are bound to be exploitable, even over "isolated" internal networks.

A 30 year old no-updates secure webserver seems almost impossible given current security research progress.

[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by Dylan16807 on Friday February 09, 2018 @03:28AM (#16338741)
Nobody said it would need to be secure?

If you can get control over the computer attached to the equipment, you already won. You don't need to exploit the web server.

[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by keytarsolo on Friday February 09, 2018 @06:56PM (#16344879)
It's not that you're exploiting the web server once you're in, it's that a 30 year old web server is the security hole you use to get in.
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by Dylan16807 on Friday February 09, 2018 @11:24PM (#16345870)
If you can see the webserver, you're already in.
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by netheril96 on Friday February 09, 2018 @10:27PM (#16345693)
> Nobody said it would need to be secure?

Then ignore the security warnings.

[ Parent | on HN ]