logoalt Hacker News

irusensei • today at 1:40 PM • 3 replies • view on HN

Okay hear me out. People are complaining about unpatcheable IOT device and thats indeed concerning. But can’t we use the bad keys to generate seemingly value certificates that can be used to jailbreak these devices?

EDIT: seems its already happening? https://x.com/otomir23/status/2112697830687047918


Replies

no_time • today at 7:36 PM

>yandex-station-lite

At last, russians got better at installing wiretaps. Reminds me of the old joke that goes "How do you know there is a soviet made bug installed in your home?

There is an extra wardrobe."

Scott_Helme_ • today at 1:52 PM

Yeah this is absolutely possible, and while they are a few good opportunities like this, it also means that someone else can decrypt all of your traffic in the same way.

reisse • today at 1:46 PM

Yeah, it's happening in the wild already. Seen more cases like that.

➕ show 1 reply