F-Secure claims that this /would/ allow forgery of Windows Updates (!!): http://... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

semenko on June 4, 2012 | parent | context | favorite | on: Microsoft Certificate used to sign "Flame"

F-Secure claims that this /would/ allow forgery of Windows Updates (!!): http://www.f-secure.com/weblog/archives/00002377.html

"...Flame has a module which appears to attempt to do a man-in-the-middle attack on the Microsoft Update system..."

marshray on June 4, 2012 [–]

Yep. It appears that, in fact, windows update has been pwned by these certs.

More info. https://www.securelist.com/en/blog/208193558/Gadget_in_the_m...

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact