News for hackers. Stuff that matters.

A comment on Three ex-US intelligence officers admit hacking for UAE. Parent comment

Re:Three ex-US intelligence officers admit hacking for UAE by aborsy on Wednesday September 15, 2021 @04:29PM (#28543976)
It’s worth mentioning that, if you listen to the podcast mentioned in this thread, DarkMatter, the hacking company, at some point ran a certificate authority that was recognized by browsers including Chrome and Firefox, until lately that news about them came out.

I wouldn’t blindly trust CAs either.

[ Parent | on HN ]
Re:Three ex-US intelligence officers admit hacking for UAE by kbenson on Wednesday September 15, 2021 @06:48PM (#28545407)
Oh, I don't, it's just also really hard to vet that stuff adequately as a single person, and also why HTTPS isn't always adequate.

There's DNS and root servers to consider as well (but that might be harder to hide with all the caching going on).

I almost edited my above comment a few minutes afterwards to append something like "and honestly, it would be pretty hard to convince me the NSA or some other group hasn't run one or more VPN providers in the past. The only question in my eye is whether it was a popular one or not."

[ Parent | on HN ]