Leaked SSL Intermediate Certificates: https connections cannot be trusted

[u/moanos]

curl https://q3k.google.com --resolve 'q3k.google.com:443:135.181.235.221'
<!DOCTYPE html>

<meta charset="utf-8">
<title>q3k.google.com</title>

<meta name="viewport" content="width=device-width, initial-scale=1" />
<link rel="shortcut icon" type="image/png" href="/favicon.png">

<style>
body {
font: courier, sans-serif;
font-size: 12px;
text-align: center;
margin-top: 100px;
}
</style>
<p>

<b>oh, this is bad</b>
</p>

Yeah, eight SSL Intermediate Certificates of eMudhra have been publicly leaked. All your servers https traffic can be broken right now. Browsers are fine as they have revoked the certificates but as you can see, curl and many other libraries still accept those.

No download can be trusted right now. Remember to not only patch your main systems but every docker container you run.

This is bad 😅

[u/pickle9977]

I really like this idea of certs and domains being more closely tied

The only reason they weren’t is we moved too fast with the web and did everything in clear text like a bunch of morons to start.

We had to add ssl/tls on and even then it was a fight

[u/average_monster → u/pickle9977]

Because it wasn't being exploited, if domains were being mitm all over the place people would have cared but it literally just didn't happen

Kinda makes sense, you pretty much have to have a bad actor as an ISP or on your local network, pretty much leaves free wifi as the only reliable attack vector and that's not really exploitable at any scale

[u/pickle9977 → u/average_monster]

Well, I guess you had to be there, it was so wonderfully exploitable, WiFi was just the icing on the cake, with MAC address spoofing you could take over entire local networks in minutes.

And that was on switched networks most early/small networks were originally hubs which was even more insanely insecure.

[u/average_monster → u/pickle9977]

i mean i was, i was literally a web dev deciding whether the sites i was selling were worth putting a cert on or not

if you think that stuff was bad pre windows xp windows had no firewall and isps tended to just shove your ip directly onto the raw internet so you could directly connect to poorly configured windows shares just by finding ips

dunno why you'd need to MAC spoof, no one really did MAC whitelists cause it was a pain in the arse and having duplicate MAC addresses tends to just break everything rather than let you onto the network

[u/pickle9977 → u/average_monster]

You would spoof the Mac of the router and within minutes you would have everyone on the network passwords

And they had no clue b/c you would just forward the traffic.

You’d have to be running a *nix os though it took a while for windows to get anywhere close to what you could do with your favorite Unix distribution.