SSL Fraudulent Certificate Questions

mikessmith · Mar 29, 2011

Whats Up MG!..
long time no see..anyways..

which forum should i post my Questions i have about something that is related to these subjects..

i googled and found these articles...and wanted to ask a question on a fourm somewhere on Major geeks..

heres the articles..

SSL certificates belonging to some of the Web's biggest sites, including Google, Microsoft, Skype and Yahoo stolen

computerworld.com
By Gregg Keizer, March 27, 2011 08:39 PM ET

http://www.computerworld.com/s/article/9215245/Solo_Iranian_hacker_takes_credit_for_Comodo_certificate_attack

Independent Iranian Hacker Claims Responsibility for Comodo Hack

wired.com
March 28, 2011-2:46 pm

http://www.wired.com/threatlevel/2011/03/comodo_hack/#

Mozilla Regrets Silence Over Stolen SSL Certificates

By Nicole Henderson, March 28, 2011

http://www.thewhir.com/web-hosting-news/032811_Mozilla_Regrets_Silence_Over_Stolen_SSL_Certificates

thanks for the help..you guys

DavidGP · Mar 29, 2011

Hi

As they are all related to the same topic on the SSL certificates, then likely interesting links and I will move the this thread to that forum area, as they are news-ish (changed the title to reflect this) and in some respects a non issue now as far as I can see, Comodo revoked the Cerfificates as well is if you have updated Chorme, Firefox and updated Windows as KB2524375 was pushed out last week to all Windows users so that IEs root certificate store would be updated.

As for the Iran aspect, Cyber warfare is the latest tool of governments and will become more prevalent in the coming years, as its easier to try and bring down electronic infastructure then to wage a conventional war, my reasoning is that rather than bricks and morter the financial markets and data are a ticking timebomb, where a Gov does not need to put personal in the fireing line, cyber warfare is done from a comfy chair.

Quote from CEO of Comodo

Moreover, the certificates would have been useless unless the attackers also had the ability to modify the domain name server (DNS) infrastructure to direct users to the phony sites associated with the fraudulent certificates, Abdulhayoglu said. Still, governments with control over communication companies would likely have access to the DNS infrastructure.
Click to expand...

Companies are damned if they dont and damned if they do release information, on one hand they may have released this info without companies like Google, Mozilla and Microsoft having updates ready to patch their apps for the leak from Comodo (not the other companies affected that originated this issue) then the tech press and users would have been panic's and screaming for blood in why a patch was not relased, then if you leave it a few days (by this time the Certificates where already null and void) to develope and test the patch, then issue it, and the tech press go at them for being slow.

But what specific questions do you have?

mikessmith · Mar 30, 2011

hey dave thanks for replying to my post..and thanks for directing my question to the right fourm..

my question is..

i used my e-mail the 25th 26th..no problem (Yahoo mail)
went to use it the next day..
BAM..these warnings pop up..

first let me say..

i spent over $1200 building my computer in the day..Abit MB..AMD processor..AGP video card..Sound blaster..Memory..HD..ECT ECT...and over $200 dollars for a win 98 OS..

I KNOW its not such a good idea to use END OF LIFE operating systems..like lets say..win98..
But for just surfing the net..doing NON Personal E-mails..and the likes..just reading stuff..
and if you never use any personal Information..or use a credit card On Line..
i don't really see the problem..

i know there are still people who still use it due to not being able run out and buy new operating systems..and compatiable computers every few years..now im wondering how many people in Mexico still use it...sorry drifting off subject here..

get the picture..yeah i wish i was rich and could run right out and buy a new lap top every 4 years..

Hell i've been driving the same car for 22 years now..works fine still gets me where ever i want to go..i guess if you take care of something it lasts..

END OF LIFE...im my opion is kinda BULL..
anyways..

heres what happened..my little problem..

i went to open my yahoo mail..which i've had forever..like 98-99..same account..

and this poped up..
heres a some pics..click on pictures to make bigger..

http://t1.pixhost.org/thumbs/2082/6470720_yahoo-mail-problem.jpg

http://t3.pixhost.org/thumbs/409/6470835_yahoo-mail-problem-2bmp.jpg

http://t3.pixhost.org/thumbs/409/6470841_yahoo-mail-problem-3bmp.jpg

im just guessing that SINCE Microsoft stoped support for 98 a few years ago..
that im not going to be able to just update and get the new patches fixes for this..Certs..

and since im still using a browser that is end of life..Firefox 2.0.012..same thing..not able to just update it with a simple click..

is there a way i can manually insert or change things to correct this..
like getting the new Cert's.

im thinking there has to be a way..im thinking the OLD SSL info is stored on my computer..or it wouldent be showing as wrong since these web giants..changed something to make my old Cert's on my computer not compatiable

i hope i asked my question right..
let me know any info you might need to help me out here..

thanks so much to anyone who replies to my post..

DavidGP · Mar 31, 2011

Hi Mike

Cannot find any updates for Win98 and the Certs yet, but will look again tomorrow and also see if its possible to export the correct ones from my version of IE9 or Firefox 4.0 and import them to your version of IE (what is it by the way) or your Firefox.

Just a quick question in do you access your Yahoo email via the browser or an email client, such as Outlook Express?

Have you cleared your Cookies and Temp Internet files and folders and rebooted and try logging in again?

Log in or Sign up

SSL Fraudulent Certificate Questions

mikessmith Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

mikessmith Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member