Advanced

Microsoft kills more code-signing certs to stop Flame-like attacks

Posted by BernardSwiss on · 4 comments
Ars Technica; By Dan Goodin 		Mail this story
Print this story

Microsoft has revoked more than two dozen digital certificates used to prove its wares are genuine after discovering some of them could be subject to the same types of attacks orchestrated by the designers of the Flame espionage malware.

Full Story

  Nav
» Read more about: Groups: Microsoft

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (4)

caitlyn ·
This is what the future looks like once we all have UEFI secure boot. How do you update a vulnerable MS key on such a system?
jhansonxi ·
Through M$ obviously. Feel safer now? :D
gus3 ·
When it takes 20 minutes on a fat pipe to do the first Windows update, but only 30 seconds for a remote compromise?

That's the result of security as an afterthought.
Ridcully ·
There is only one secure thing about Windows: You are secure in the knowledge that Windows is insecure.

I think UEFI certificates are simply a method of control to try to stop the slow erosion of the Microsoft Empire that is now becoming very visible.

Try this:

http://fossforce.com/2012/07/windows-era-hand/

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post