alt Hacker NewseMudhra to exit global SSL/TLS certificate business
Comments
"We decided five business pipelines were too many, and will be focusing on our 4 core competencies."
~ Not a quote from the press release
At this point, they probably asked Claude or another chatbot how to change the root CA key and realized that is was too late.
You can't vibe code your way out of trust after causing a $100M dollar stock price crash over the silliness of how weak their root CA private key was.
probably a good career move
Disgusting. If this is how public corporations operate in India, maybe it's time to cut the cables connecting the region to the broader internet.
> Now that our cover fronting for [intel agency|cybercrime org] has been revealed.
Laughable entity. Good!
"You can't fire me, I quit!"
"You can't fire me, I quit!"
"Trust Delivered". Eh..
[dead]
[dead]
[dead]
[dead]
[dead]
[dead]
[dead]
[dead]
now the question for the media for the next week :
ban LLM discovery of horrendous security practices because as it turns out security-thru-obscurity is being practiced as 'good enough' across the world , or actually enforce realistic and livable security practice ?
given the insistence on picking overblown and totally partisan poor choices lately, I presume the media will sit on the side of 'we'll just ban LLMs from checking the rest of our security apparatus for single digit keys' and charge 'Wayne' with terrorism statutes.' -- but hopefully i'm just being a jaded pessimist.
Everybody laughed when they said GPT-2 wasn’t safe to release. This is the tip of the iceberg.
When is Sectigo, the root CA that cross-signed the vulnerable intermediate CAs, going to take responsibility for fucking up too? Why should we keep trusting them?