News for hackers. Stuff that matters.

A comment on Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds. Parent comment

Re:Eight Bits of Trust; eMudhra's CA keys cracked in millise... by ezoe on Wednesday October 21, 2026 @08:23AM (#50179710)
These devices are already very weak and many of them even do non-TLS updates with no signing check anyway.

If it has been so weak already, it can't be weaker.

[ Parent | on HN ]
Re:Eight Bits of Trust; eMudhra's CA keys cracked in millise... by Sayrus on Wednesday October 21, 2026 @08:55AM (#50180123)
Not always true. I have IoT devices where a valid certificate is useful because the original host doesn't exist anymore and the certificate isn't pinned.

Flashing the devices require direct UART/USB access which may involve soldering, if it even exists. This leak is gold for those because these devices will never get an updated CRL.

[ Parent | on HN ]