News for hackers. Stuff that matters.

A comment on China collecting Apple iCloud data. Parent comment

Re:China collecting Apple iCloud data by dmix on Monday October 20, 2014 @11:42AM (#8482671)
> I am more surprised that they don't have common Chinese software install a set of MitM CAs.

It said in the article: the most popular Chinese browser Qihoop 360 browser doesn't even giving a warning for the bad SSL cert. "Qihoo’s popular Chinese 360 secure browser is anything but and will load the MITMed page directly."

https://en.wikipedia.org/wiki/Qihoo

[ Parent | on HN ]
Re:China collecting Apple iCloud data by ryan-c on Monday October 20, 2014 @11:52AM (#8482731)
See my other comment.

* The popularity of that browser is way over reported - they tend to report "installed" statistics rather than "used".

* If you read the article you'll see self signed certificates were used for the MitM. From my own research, 360 secure browser just doesn't validate certificates in many circumstances. No CA required.

[ Parent | on HN ]
Re:China collecting Apple iCloud data by ttflee on Tuesday October 21, 2014 @10:06AM (#8487372)
According to my observation Qihoo Browser was more frequently used by a tech noob than tech savvy. And this alone poses great risk of the general public regardless to the underlying ethnics and interests.
[ Parent | on HN ]