Security Firm Bit9 Hacked, Used to Spread Malware

Re:Security Firm Bit9 Hacked, Used to Spread Malware by jessaustin on Tuesday February 12, 2013 @02:49PM (#5209039)

This seems to confirm the hypothesis that Bit9 does not store the private keys it uses to sign executables on an HSM. If it's appropriate, can you describe the system that stores those keys? Is it somebody's desktop? Is it in a secure area? How many people have access to it? What other software is installed on it? Is it connected to a network?

[ Parent | on HN ]

Re:Security Firm Bit9 Hacked, Used to Spread Malware by hoov on Tuesday February 12, 2013 @03:54PM (#5209460)

I haven't worked there since 2008, so I don't have any idea what's currently in place.

[ Parent | on HN ]