News for hackers. Stuff that matters.
Re:FortiGuard XOR Encryption in Multiple Fortinet Products by precurse on Tuesday November 26, 2019 @12:43PM (#21640612)
They won't even create a fix for their software after blatantly disabling TLS server validation in their FortiSIEM product: https://packetstormsecurity.com/files/154702/Fortinet-FortiS...

They use the "-k" curl flag throughout their code (disabling ALL certificate validation), since I assume is to make initial configuration easier. Rather than fix this going forward, they created a workaround document which all new and existing customers need to follow to secure their setup.

There are no comments on this comment yet.