3 ms·
"Additionally, the large security hole created by the Superfish program can easily be breached, because the security key for the single self-signed root certifi
by patcheudor 11y ago
"Additionally, the large security hole created by the Superfish program can easily be breached, because the security key for the single self-signed root certificate used by the Superfish program has been broken and published on the internet. It took one computer security researcher less than 15 seconds on-line to obtain the security key for the Superfish root certificate."
It's interesting that they are sticking to the original narrative when the situation was actually far worse as I originally disclosed here on HN & which was later written about by Filippo Valsorda on his blog.
Original discovery:
https://news.ycombinator.com/item?id=9078536 https://news.ycombinator.com/item?id=9078536
Filippo's blog post:
https://blog.filippo.io/komodia-superfish-ssl-validation-is-broken/ https://blog.filippo.io/komodia-superfish-ssl-validation-is-...