Active Topics
-
Firefox with Leste (5)
to Maemo 7 / Leste by teroyk - 18 hrs, 2 mins ago -
Handbook (2)
to Maemo 7 / Leste by teroyk - 1 day, 17 hrs ago - more...
)))
|
2011-10-26
, 21:33
|
|
Posts: 3,617 |
Thanked: 2,412 times |
Joined on Nov 2009
@ Cambridge, UK
|
#12
|
Originally Posted by kralde
The DigiNotar Certificate Authority got hacked and a lot of SSL certificates were issued for common sites (google, microsoft, amazon, etc), allowing the hackers to pretend to be these sites without the user being able to tell there's a problem. It took DigiNotar a long while to find they'd been hacked, and even longer to admit that they didn't really know how many (and which) certificates had been issued.
A little question...what is the DigiNotar issue? X_X
The end result is that DigiNotar have been blacklisted by all the browsers (which is what this update will add for the Maemo browser), preventing any certificates signed by them from being accepted. The company has since (inevitably) gone out of business.
The suspicion is that Iranian hackers (possibly government sponsored) were behind this - there's certainly evidence of a huge increase in related lookups from Iran shortly after this hack.
You can see a preliminary post-mortem on this attack here.
| The Following 48 Users Say Thank You to Rob1n For This Useful Post: | ||
Alfred, Amboss, arifsaha, Arrancamos, ayos!, demolition, don_falcone, Drekkie, Estel, F2thaK, figaro, fw190, gordonshowers, Helmuth, JayBEE, Jedibeeftrix, joerg_rw, jpala16, kent_autistic, Kitams, mankir, MartinK, mich, MINKIN2, moepda, mrsellout, nath, nicolai, nkirk, noetus, Nozu, oliforum, OVK, patemera, pelago, purgiaali, rentze, rfa, ryusilva, sbock, shady, shanttu, Soppa, Tensuke, theonelaw, xRobby, Zentenario, ziggadebo | ||
 |
|
2011-10-26
, 21:36
|
|
Posts: 168 |
Thanked: 58 times |
Joined on May 2010
@ Madrid
|
#13
|
wow, pretty good explanation, thanks a lot
 |
|
2011-10-26
, 21:38
|
|
Posts: 361 |
Thanked: 219 times |
Joined on Sep 2010
|
#14
|
Originally Posted by kralde
You may want to look at this:
Amazing...
A little question...what is the DigiNotar issue? X_X
http://talk.maemo.org/showthread.php?t=76178
| The Following 3 Users Say Thank You to PMaff For This Useful Post: | ||
 |
|
2011-10-26
, 21:43
|
|
Posts: 855 |
Thanked: 612 times |
Joined on Oct 2010
@ Germany
|
#15
|
At least nokia cares about our safety...
__________________
Reps are just one click away: Extras | Extras-Testing | Extras-Devel | My-Maemo | CSSU |
Transform your lock screen into a weather forecast Thanks button ================>
Reps are just one click away: Extras | Extras-Testing | Extras-Devel | My-Maemo | CSSU |
Transform your lock screen into a weather forecast Thanks button ================>
|
|
2011-10-26
, 21:50
|
|
Posts: 361 |
Thanked: 219 times |
Joined on Sep 2010
|
#16
|
Originally Posted by Alfred
Not to be picky but there is a difference between safety and security.
At least nokia cares about our safety...
;-)
Simple:
http://en.wikipedia.org/wiki/Safety
http://en.wikipedia.org/wiki/Security
http://en.wikipedia.org/wiki/Computer_security
|
|
2011-10-26
, 21:55
|
|
Posts: 209 |
Thanked: 44 times |
Joined on Jan 2010
@ Austria
|
#17
|
I'm using CSSU. So I should skip the official Nokia update and wait for the CSSU update, am I right?
Are there any benefits or disadvantages doing so?
Are there any benefits or disadvantages doing so?
 |
|
2011-10-26
, 21:59
|
|
Posts: 5,028 |
Thanked: 8,613 times |
Joined on Mar 2011
|
#18
|
first question: yes.
Second question: no.
Silly Joke: they'll ship flash 10.1 with this update
Second question: no.
Silly Joke: they'll ship flash 10.1 with this update
__________________
N900's aluminum backcover / body replacement
-
N900's HDMI-Out
-
Camera cover MOD
-
Measure battery's real capacity on-device
-
TrueCrypt 7.1 | ereswap | bnf
-
Hardware's mods research is costly. To support my work, please consider donating. Thank You!
N900's aluminum backcover / body replacement
-
N900's HDMI-Out
-
Camera cover MOD
-
Measure battery's real capacity on-device
-
TrueCrypt 7.1 | ereswap | bnf
-
Hardware's mods research is costly. To support my work, please consider donating. Thank You!
|
|
2011-10-26
, 22:06
|
|
Posts: 535 |
Thanked: 598 times |
Joined on Apr 2011
@ Republic of the Philippines
|
#19
|
MAG
since it seems like you're in touch with Nokia regarding this Diginotar security issue, is it possible for you to tell them about the Flash security issues posted in this thread: talk.maemo.org/showthread.php?t=77439?
(i'm totally confused why Flash on maemo cannot be updated when it's possible on NITDroid. it's the same device on different OS... is it because Nokia's not willing to pay Adobe or something else?)
since it seems like you're in touch with Nokia regarding this Diginotar security issue, is it possible for you to tell them about the Flash security issues posted in this thread: talk.maemo.org/showthread.php?t=77439?
(i'm totally confused why Flash on maemo cannot be updated when it's possible on NITDroid. it's the same device on different OS... is it because Nokia's not willing to pay Adobe or something else?)
| The Following 2 Users Say Thank You to vetsin For This Useful Post: | ||
 |
| Tags |
| security |
«
Previous Thread
|
Next Thread
»
| Thread Tools | |
|
All times are GMT. The time now is 04:19.