News for hackers. Stuff that matters.
Re:Netgear Signed TLS Cert Private Key Disclosure by lima on Monday January 20, 2020 @09:14AM (#22098892)
An attacker can just dump the unique key, impersonate the device and use that for a MitM attack. There's just no way to do this securely without completely locking down the devices using hardware key management (which would be unreasonably expensive for a cheap router, plus bad for people who want to flash their own firmware).

Same level of security, and a lot of extra complexity and cost.

Re:Netgear Signed TLS Cert Private Key Disclosure by oarsinsync on Tuesday January 21, 2020 @01:05AM (#22104640)
Yep, and that compromises that one device in the field. Not every device globally, today and tomorrow.
Re:Netgear Signed TLS Cert Private Key Disclosure by lima on Tuesday January 21, 2020 @03:22AM (#22105191)
Only if each device has a unique subdomain.