Researchers have discovered malware circulating in the wild that uses a private signing certificate belonging to the Malaysian government to bypass warnings many operating systems and security software display when end users attempt to run untrusted applications. The stolen certificate belongs to the Malaysian Agricultural …
"quite some time ago."
So these Malaysian authorities *knew this* yet kept mum and didn't revoke the thing?
Well, let's see how quickly mozilla, google, and micros~1 summarily drop them from their CA collections.
Yup, this is most hilarious statement I read in press today.
The sad part is that we have no choice but *still* keep using PKI.
the internet was nice while it lasted
All the king's horses and all the king's men could certify anything ever again
So what cert is that?
If I dump it, will it be back on the next update??
Will this go on forever???
- Vid Hubble 'scope snaps 200,000-ton chunky crumble conundrum
- Updated + vids WHOA: Get a load of Asteroid DX110 JUST MISSING planet EARTH
- 10 years of Facebook Inside Facebook's engineering labs: Hardware heaven, HP hell – PICTURES
- Very fabric of space-time RIPPED apart in latest Hubble pic
- Massive new AIRSHIP to enter commercial service at British dirigible base