hoherd

IOT devices famously never get firmware updates, which means most of them will remain vulnerable to this leaked trust chain until the cert expires in 2039. That means you can forge an HTTPS server for any domain that an IOT device connects to and act as if you are the authoritative server. This means intercepting encrypted traffic and being able to decrypt it, or serving payloads to the device from a fake trusted server.

If your TV connects to whatever.lg.com, you can create a certificate for that domain using this intermediate signing cert, and pretend to be that server. That's how https://dv-g3b-emudhra.we-have-a-problem.com/ was created.

Comment · 11 days ago

Finally we can learn once and for all what those LG TVs are really up to.

Comment · 19 days ago

While I totally agree, there is precedent. HP OpenView came out in 1987, which was 11 years before the term "Open Source" became a thing.

Comment · 22 days ago

Same with USA. I was surprised at the variety of platforms supported.

Comment · 25 days ago

Sure, but that disregards what happened to adjacent markets during the crash. The economy isn't made entirely of tech companies. The salary of those workers goes outside of the tech industry.

Comment · 1 month ago

It's not. The Honda Super Cub is the top selling motor vehicle in the world, with 60 million produced in 2008 alone. https://en.wikipedia.org/wiki/Honda_Super_Cub

Comment · 1 month ago

I recently blocked youtube.com on my home network so that my whole family could take a break from it. It broke my work e-mail login, because gmail sends you through youtube.com in order to set login cookies.

Comment · 1 month ago

I am not who you asked, but lately it has been really frustrating for me that macOS locks portions of the filesystem when the screen is locked, which breaks rsync backups because they cannot read those files. I have been unable to find a way around this.

That being said, the security design that creates this problem is quite impressive, and I think much more tight than most people realize is happening on stock macOS. I just wish that I could unlock my whole home directory from the CLI somehow when I do my non-time-machine backup.

Comment · 1 month ago

The first time I held an iPhone 5, I thought it was a demo device. It was too light to actually be the real device. That was such a great phone.

Comment · 1 month ago

Have you ever connected an iPad to an external display, mouse, and keyboard? I agree with you that laptop sales would continue, but I bet they would decline. Apple could do the MS Surface much better than MS did.