5 ms·
I daresay if you included "...and you'll need to add this certificate to your browser..." you could get a good number of people installing your Totally Trustwor
by shabble 15y ago
I daresay if you included "...and you'll need to add this certificate to your browser..." you could get a good number of people installing your Totally Trustworthy Root Cert(tm) and do a bit of HTTPS MitM as well.
Makes it more likely someone will notice and you'll get flagged though I suppose.
- ma2rten 15y agoWhat would be even easier and more evil is to inject some backdoor into every (non ssl) executable download. Then you can just install a keylogger or patch the browser or whatever else you please.
- jarrett 15y agoYou're right. I hadn't thought of that, but it strikes me as one of the nastier attacks I've heard of in a while. Just think of how many downloadable packages require root privileges to install.