53
Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps
(www.theregister.com)
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
Community Rules
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]
Notable mention to [email protected]
This wasn't some complicated edge-case, it was gross incompetence by SSL.com.
If I was a browser or OS manufacturer I would be revoking their root certificates over this.