3 ms·
Read the article again. > Nevertheless, because both eDellRoot and DSDTestProvider are installed in the Windows root store for certificate authorities together
by adekok 11y ago
Read the article again.
> Nevertheless, because both eDellRoot and DSDTestProvider are installed in the Windows root store for certificate authorities together with their private keys, they can be used by attackers to generate rogue certificates for any website that would be accepted on the affected Dell systems.
It's not the certificate that's the problem. It's the installation of the private keys along with the certificate.
- nickpsecurity 11y agoRevised: "Dude, you're getting some MITM action!"
- mSparks 11y agobetter than that. let's you sign software as written by Microsoft
- JoshTriplett 11y ago> It's not the certificate that's the problem. It's the installation of the private keys along with the certificate. No, that just makes it much worse. Your system provider has no business installing a root certificate even without a private key, because that still gives them the ability to spoof any website. And even if you trust them not to do so, do you trust everyone who could break their security?
- mSparks 11y agowell. actually it's that the private key is the same for all machines and publicly accessible.... im going to have lots of fun with this. a ton of Dell machines about to get totally owned.