News for hackers. Stuff that matters.

chicom_malware

Re:How to distrust a CA without any certificate errors on Thursday March 06, 2025 @06:26PM (#43286058)
WebPKI is a maze of fiefdoms controlled by a small group of power tripping little Napoleons.

Certificate trust really should be centralized at the OS level (like it used to be) and not every browser having its own, incompatible trusted roots. It's arrogance at its worst and it helps nobody.

> It would certainly send a strong message, and cause a lot of chaos, if the biggest CA on the Internet found itself being removed from trust stores

Their customers would be forced to give their business to Honest Achmed[1].

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=647959

Re:OpenBSD Innovations on Saturday February 22, 2025 @07:17PM (#43144785)
Worth mentioning lack of Bluetooth is only because they felt the existing BT stack was not up their standards and ripped it out rather than let it rot like most software.