Comodo hack – Noise https://noise.getoto.net The collective thoughts of the interwebz Thu, 31 Mar 2011 01:11:35 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.2 Messages from the (purported) Comodo Hacker https://noise.getoto.net/2011/03/31/messages-from-the-purported-comodo-hacker/ Thu, 31 Mar 2011 01:11:00 +0000 http://noise.getoto.net/?guid=44116031cbcbfb285f9e170fe565809f pastebin. The hacker claims to have used API access to generate the certificates mentioned in

Comodo has also recently announced that two additional resellers were also breached.

The documents are well worth a read to understand how web based infrastructure services might be breached, and where we might expect to see attacks in the future. API accessibility and vulnerable servers make for a nasty combination when a trust based infrastructure is in play.
]]>