News for hackers. Stuff that matters.
Re:GlobalSign: RSA-1024 leaf certificate issued after 2013-1... by RandomBK on Tuesday February 09, 2021 @11:43PM (#26085816)
> Certificate ordered with ID [...] for www.celticpapaya.com.

> Domain flagged as high-risk (keyword "pay")

Somehow, I found this line particularly funny. Simple systems and heuristics like keyword searching continue to power and protect systems around the world, triggering false positives (and negatives) that can often be opaque to outside observers.

Will ML and NLP eventually overtake these systems, bringing along their own pros/cons? Or will these systems continue to proliferate into the far future, such that in the distant year 2077, some poor traveler gets dragged out for special screening because they listed "burgundy" in their customs manifest?

Re:GlobalSign: RSA-1024 leaf certificate issued after 2013-1... by kevincox on Wednesday February 10, 2021 @01:33PM (#26093011)
I also find it funny. But the key redeeming feature is that it was paused, and automatically sent to human review. So sure, your cert takes a little while to issue but no significant harm.

The obvious contrast is Google closing legitimate paying accounts with no option for human review.

Re:GlobalSign: RSA-1024 leaf certificate issued after 2013-1... by FDSGSG on Thursday February 11, 2021 @04:32PM (#26107574)
What's the point of having a CA perform phishing checks anyway? Especially since the phishers can just use letsencrypt.
Re:GlobalSign: RSA-1024 leaf certificate issued after 2013-1... by kaszanka on Wednesday February 10, 2021 @04:00AM (#26086963)
This is as transparent to outside observers as it gets compared to ML.