I sure feels like the latest breach of DigiNotar, which allowed for over 200 rogue certificates to be generated, should warrant a louder outcry from the public. With the low profile in general news outlets, one could speculate that there is some cover-up going on. That aside, most interesting was that in addition to the high target certificates like Google, Mozilla, Yahoo and WordPress; there was also a new fresh certificate for torproject.org. And this is where the real conspiracy theory begins.
Who would benefit from sneaking in as a man-in-the-middle in a Tor communication channel? It certaily feels like a job on a government scale (or MPAA of course), but on the other side it could just have been some random hacker getting lucky. Based on the usage of this extremely dangerous hack, one begin to wonder.
What kind of Gmail info might the attacker have been looking for, to intentionally reveal the existence of the certificates on such a large scale. Would a clever attacker not be more careful with exposure like in the breaking of HJN-25.
I suppose us mortals will never know, but it sure feels like we are living in a spy novel. Who's up for some good old digging around?
I suppose us mortals will never know, but it sure feels like we are living in a spy novel. Who's up for some good old digging around?
