1. 44
    23,000 HTTPS certificates axed after CEO emails private keys security arstechnica.com
    adsouza avatar via adsouza 5 months ago | cached | 4 comments

  1.  

  2. 13
    Mex avatar Mex 5 months ago | link

    Before the site went down someone found a commend injection issue, allowing command execution as root.

    1. 18
      babak avatar babak 5 months ago | link

      For those who didn’t see it. It was a textbox on a web page passing unfiltered input to a root shell!

      1. 9
        chadski avatar chadski 5 months ago | link

        https://twitter.com/svblxyz/status/969220402768736258

        https://twitter.com/Manawyrm/status/969230542578348033

    2. 4
      trousers avatar trousers 5 months ago | link

      previous discussion: https://lobste.rs/s/sz6ylh/digicert_statement_on_trustico