Does your browser rejected revoked certificates?

Re:Does your browser rejected revoked certificates? by themartorana on Sunday April 13, 2014 @08:39PM (#7583878)

GRC.com has been around for so long and it is just awesome. Don't know if this is still the case, but Steve Gibson either used to - or still does - write all of his software in assembly[1]. As a young comp sci college student in 1997, I can remember how insanely, blazingly fast his software and scanners seemed to run on my computer compared to all my other programs. He wrote about why he wrote in assembly and it was a huge inspiration to me as a young programmer.

Yes, this is totally a fanboy post :) But it's cool to see Steve still popping up in relevant security news almost 20 years later.

[1] https://www.grc.com/smgassembly.htm

[ Parent | on HN ]

Re:Does your browser rejected revoked certificates? by mahmud on Sunday April 13, 2014 @08:45PM (#7583901)

Oh yes, he has been around for long. But he lost a bit of credibility after his wolf-cry when he campaigned against the inclusion of raw-sockets in Windows XP, alleging hackers might use it.

[ Parent | on HN ]

Re:Does your browser rejected revoked certificates? by shadearg on Sunday April 13, 2014 @11:04PM (#7584310)

He's definitely adamant about the ongoing exclusion of raw sockets on Windows and alleges malware would absolutely abuse it if it were available. He still talks about it once and a while and certainly does not regret that stance.

[ Parent | on HN ]

Re:Does your browser rejected revoked certificates? by wnevets on Sunday April 13, 2014 @10:59PM (#7584298)

you do realize that he was right and MS removed them right?

[ Parent | on HN ]

Re:Does your browser rejected revoked certificates? by nuxi7 on Monday April 14, 2014 @12:03AM (#7584476)

microsoft removed it, but that doesn't mean he was right.

Last I checked, the internet did not end while XP had raw sockets, and windows server retains this capability.

[ Parent | on HN ]

Re:Does your browser rejected revoked certificates? by wnevets on Monday April 14, 2014 @10:37AM (#7586384)

So why did MS remove them?

[ Parent | on HN ]

Re:Does your browser rejected revoked certificates? by mahmud on Monday April 14, 2014 @07:16PM (#7589455)

Responding to the public hysteria; they couldn't take their chances, they would have been crucified if even a single incident was reported, because they had "forewarning".

Steve Gibson did to raw-sockets what Jenny McCarthy did to vaccines.

[ Parent | on HN ]

Re:Does your browser rejected revoked certificates? by MichaelGG on Sunday April 13, 2014 @11:32PM (#7584383)

... Been around as a joke. Like read this one:

https://www.grc.com/ssl/ev.htm

You'd think it's an odd mix of satire and CA salesmanship with a healthy dose of not understanding how anything works, but apparently he's serious.

[ Parent | on HN ]

Re:Does your browser rejected revoked certificates? by enneff on Sunday April 13, 2014 @11:19PM (#7584342)

http://attrition.org/errata/charlatan/steve_gibson/

[ Parent | on HN ]

Re:Does your browser rejected revoked certificates? by shadearg on Sunday April 13, 2014 @11:45PM (#7584421)

Just about everything he writes is MASM. He talked once briefly about a custom packet rewriter that sits on his edge to assure that any packet reaching GRC or his internal network is properly formed. He didn't divulge much else about it.

He did take up Javascript a couple years ago because of a new-found value in client-side processing and canvas[1] for animation.

He's currently working on SpinRite 6.1 with modern I/O support and an authentication mechanism he came up with out of the blue called SQRL[2].

[1] https://www.grc.com/animation.htm [2] https://www.grc.com/sqrl/sqrl.htm

[ Parent | on HN ]