GlobalSign stops secure certificates after hack claim Skip to main content

GlobalSign stops secure certificates after hack claim

Gmail screen Google security certificates were among those to be faked following a recent hack

Related Stories

Belgian security firm GlobalSign has temporarily stopped issuing authentication certificates for secure websites.
It comes after an anonymous hacker claimed to have gained access to the company's servers.
If confirmed, it would be the second security breach at a European certificate authority in two months.
Hundreds of bogus DigiNotar authentications were issued following an intrusion into its systems.
Certificate authorities (CAs) are companies or public bodies whose job is to confirm that secure websites are genuine.
When computers connect to a site with TLS or SSL authentication, a certificate is issued which verifies the site's identity to the web browser.
Fake certificates could allow someone to spy on a user's activity.
Multiple targets GlobalSign took action as the result of a posting which appeared on the online notice board Pastebin.
The author, who identified themselves only as "ComodoHacker", claimed to have gained access to four certificate authorities, in addition to DigiNotar.
Only GlobalSign is named, although the message points out that an attack on StartCom was foiled by its boss Eddy Nigg.
DigiNotar certificate use Web analysis suggested that Iranians may have been targeted using bogus DigiNotar certificates
ComodoHacker also refers to an attack on US certificate authority Comodo, which was targeted in March.
As a precaution, GlobalSign said it was temporarily ceasing the issuance of all certificates while it investigated the claims.
The hacker also played down suggestions that the attacks were the work of Iranian authorities.
"I'm single person, do not AGAIN try to make an ARMY out of me in Iran. If someone in Iran used certs I have generated, I'm not one who should explain," said the posting.
It had been suggested that, because many of the bogus DigiNotar certificates were issued to users in Iran, that authorities in there may have initiated the CA hack as a tool for spying on dissidents.
A report on the DigiNotar attack said that up to 300,000 Iranians may have had their Gmail accounts monitored as a result of a fake Google certificate being created.
Hacktivist While the anonymous posting contains no information about the identity of the CA hacker, it does detail a political agenda.
The message states: "Dutch government is paying what they did 16 years ago about Srebrenica, you don't have any more e-Government huh?"
It appears to reference the apparent non-intervention of Dutch peacekeeping forces during the notorious 1995 Srebrenica massacre, where Serbian forces killed more than 8,000 Bosnian Muslims.
DigiNotar certificates are used to authenticate many online services offered by the Dutch government, although the company has said that these use a separate system which was not compromised during the attack.
State prosecutors in the Netherlands are investigating the incident.

http://www.bbc.co.uk/news/technology-14819257
Labels:

Comments

Post a Comment

Popular posts from this blog

Chronology of the Press in Burma

1836 – 1846 * During this period the first English-language newspaper was launched under British-ruled Tenasserim, southern  Burma . The first ethnic Karen-language and Burmese-language newspapers also appear in this period.     March 3, 1836 —The first English-language newspaper,  The Maulmain Chronicle , appears in the city of Moulmein in British-ruled Tenasserim. The paper, first published by a British official named E.A. Blundell, continued up until the 1950s. September 1842 —Tavoy’s  Hsa-tu-gaw  (the  Morning Star ), a monthly publication in the Karen-language of  Sgaw ,  is established by the Baptist mission. It is the first ethnic language newspaper. Circulation reached about three hundred until its publication ceased in 1849. January 1843 —The Baptist mission publishes a monthly newspaper, the Christian  Dhamma  Thadinsa  (the  Religious Herald ), in Moulmein. Supposedly the first Burmese-language newspaper, it continued up until the first year of the second Angl
Post a Comment
Read more

ARSA claims ambush on Myanmar security forces

Arakan Rohingya Salvation Army (ARSA) on Sunday claimed responsibility for an ambush on Myanmar security forces that left several wounded in northern Rakhine state, the first attack in weeks in a region gutted by violence. Rakhine was plunged into turmoil last August, when a series of ARSA raids prompted a military backlash so brutal the UN says it likely amounts to ethnic cleansing of the Muslim Rohingya minority. The army campaign sent some 650,000 Rohingya fleeing for Bangladesh, where refugees have given harrowing accounts of rape, murder and arson at the hands of security forces and vigilantes. Myanmar's military, which tightly controls information about Rakhine, denies any abuses and insists the crackdown was a proportionate response to crush the "terrorist" threat. ARSA have launched few attacks in recent months.  But the army reported that "about ten" Rohingya terrorists ambushed a car with hand-made mines and gunfire on Friday morning
Post a Comment
Read more

Thai penis whitening trend raises eyebrows

Image copyright LELUXHOSPITAL Image caption Authorities warn the procedure could be quite painful A supposed trend of penis whitening has captivated Thailand in recent days and left it asking if the country's beauty industry is taking things too far. Skin whitening is nothing new in many Asian countries, where darker skin is often associated with outdoor labour, therefore, being poorer. But even so, when a clip of a clinic's latest intriguing procedure was posted online, it quickly went viral. Thailand's health ministry has since issued a warning over the procedure. The BBC Thai service spoke to one patient who had undergone the treatment, who told them: "I wanted to feel more confident in my swimming briefs". The 30-year-old said his first session of several was two months ago, and he had since seen a definite change in the shade. 'What for?' The original Facebook post from the clinic offering the treatment, which uses lasers to break do
1 comment
Read more