News for hackers. Stuff that matters.

A comment on Everything authenticated by Microsoft is tainted. Parent comment

Re:Everything authenticated by Microsoft is tainted by lazide on Friday September 29, 2023 @08:40AM (#37703119)
HSM’s are super inconvenient obviously, and as Mr. Robot showed not perfect. So why bother? /s
[ Parent | on HN ]
Re:Everything authenticated by Microsoft is tainted by jnsaff2 on Friday September 29, 2023 @09:00AM (#37703472)
Apparently they might also be backdoored by the NSA: https://news.ycombinator.com/item?id=37571014
[ Parent | on HN ]
Re:Everything authenticated by Microsoft is tainted by lazide on Friday September 29, 2023 @09:02AM (#37703503)
Still probably better than having the private key part of a random core dump from a random developer. :s

That’s just embarrassing.

[ Parent | on HN ]
Re:Everything authenticated by Microsoft is tainted by jnsaff2 on Friday September 29, 2023 @09:09AM (#37703635)
No doubt. My expectations to MS engineering are really low so I'm unfortunately not shocked.
[ Parent | on HN ]
Re:Everything authenticated by Microsoft is tainted by grotorea on Friday September 29, 2023 @11:08AM (#37705382)
Frankly is this important? If the NSA is a threat to you do you have any business trusting MS?
[ Parent | on HN ]
Re:Everything authenticated by Microsoft is tainted by lazide on Saturday September 30, 2023 @10:07AM (#37715567)
No one has any business trusting Microsoft, apparently?

I’m under no delusions that an intelligence agency with ‘home team advantage’ wouldn’t already have the keys to the kingdom. If they are in the apparent habit of leaving the keys sitting around in random Cafes, the odds that other non-home team intelligence agencies have a copy increases dramatically too. Or even random miscreants.

As to if that matters? Eh.

[ Parent | on HN ]