3 ms·
You have some details mixed up there. Stuxnet did not use any domestic certificates. You're likely thinking of Flame, which still did not involve stealing keys
by lawnchair_larry 11y ago
You have some details mixed up there. Stuxnet did not use any domestic certificates. You're likely thinking of Flame, which still did not involve stealing keys or certificates, but rather exploiting a flaw relating to how certificates were issued to the general public.
- exelius 11y agoWell, just remember that when you're dealing with clandestine agencies like CIA/NSA, they can probably either turn or place an asset in one of Apple's security teams and get access that way. Their evidence collection methods don't have to hold up in court.
- TACIXAT 11y agoWell, you should edit your post so it is accurate.
- mspecter 11y agoYeah, stuxnet used a stolen signing cert from Realtek.
- exelius 11y agoYeah, just saying that with Apple's level of access to the information on people's phones, it would be a very attractive target - and the best way to obtain access and keep it would be an insider. The NSA/CIA are spy agencies, after all, and they DEFINITELY have the capability to infiltrate a company like Apple (either through a vendor or by getting an agent on Apple's payroll).