View Single Post
  #1   (View Single Post)  
Old 1st November 2012
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,131
Default Hacker Had Total Control Over DigiNotar Servers, Report

From http://www.securityweek.com/hacker-h...servers-report

Quote:
DigiNotar, the now defunct Netherlands-based Certificate Authority (CA) that suffered a breach resulting in fraudulent SSL certificates being generated, was completely at the mercy of a hacker that attacked them, a report delivered to the Dutch government explains.

The report, issued to the Ministry of the Interior and Kingdom Relations, shows that things were far worse than expected, ultimately proving that VASCO made the right decision in closing down DigiNotar. In addition to completely controlling the eight certificate servers, the attacker(s) altered log files in order to cover their tracks.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote