Conversation

Notices

1. Embed this notice
   Not Simon 🐐 (screaminggoat@infosec.exchange)'s status on Thursday, 12-Sep-2024 17:28:00 JST Not Simon 🐐

   watchTowr: We Spent $20 To Achieve RCE And Accidentally Became The Admins Of .MOBI
   Yo what the fuck. watchTowr had inadvertently undermined the CA process for the entire .mobi TLD:

   we took control of a chunk of the Internet’s infrastructure, opened up a big slab of juicy attack surface, and found a neat way of undermining TLS/SSL - the fundamental protocol that allows for secure communication on the web.

   No spoilers, this is a must-read.

   #mobi #tls #ssl #vulnerability

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Thursday, 12-Sep-2024 17:59:17 JST Haelwenn /элвэн/ :triskell:

     in reply to
     @screaminggoat
     > One of the biggest ‘kludges’ in the WHOIS system is the means of locating the authoritative WHOIS server for a given TLD in the first place.
     
     The good way of doing whois (as done by at least FreeBSD and BusyBox) is to send queries to whois.iana.org and follow referrals.