Dell shipping laptop with rogue self-signed root CA • Hacker News Board

Re: Dell shipping laptop with rogue self-signed root CA

#11

Post by [deleted] » Mon, Nov 23, 2015, 5:14 PM UTC

ctz wrote: post #10

Here's a test website from Kenn White: https://bogus.lessonslearned.org/

[deleted]

Re: Dell shipping laptop with rogue self-signed root CA

#12

Post by guelo » Mon, Nov 23, 2015, 5:27 PM UTC

This should be the NSA's job, keeping us safe from all the corporate and foreign government cyber espionage that is completely out of control. In reality they don't give a shit because they like to free ride on top of all the other backdoors as well as the ones they create.

Re: Dell shipping laptop with rogue self-signed root CA

#13

Post by 01Michael10 » Mon, Nov 23, 2015, 5:32 PM UTC

One should always do a clean install of Windows with a OEM disc when buy a new PC. You can avoid a lot of issues that way...

Re: Dell shipping laptop with rogue self-signed root CA

#14

Post by Spooky23 » Mon, Nov 23, 2015, 5:33 PM UTC

I love the Dell response: "We have top men working on it."

Re: Dell shipping laptop with rogue self-signed root CA

#15

Post by strictnein » Mon, Nov 23, 2015, 5:34 PM UTC

guelo wrote: post #12

This should be the NSA's job, keeping us safe from all the corporate and foreign government cyber espionage that is completely out of control. In reality they don't give a shit because they like to free ride on top of all the other backdoors as well as the ones they create.

The NSA's job does entail keeping government communications secret and secure. So whole buildings of people do "give a shit" about stuff like this.

Re: Dell shipping laptop with rogue self-signed root CA

#16

Post by wlesieutre » Mon, Nov 23, 2015, 5:34 PM UTC

01Michael10 wrote: post #13

One should always do a clean install of Windows with a OEM disc when buy a new PC. You can avoid a lot of issues that way...

Or buy "Signature Edition" from Microsoft

http://www.microsoftstore.com/store/msusa/en_US/cat/Signatur...

Re: Dell shipping laptop with rogue self-signed root CA

#17

Post by Avitas » Mon, Nov 23, 2015, 5:34 PM UTC

It's hard for me to imagine a company as big as Dell making such a bone-headed blunder.

Re: Dell shipping laptop with rogue self-signed root CA

#18

Post by nailer » Mon, Nov 23, 2015, 5:35 PM UTC

Related: how to control the SSL CAs your browser trusts, on nearly every device (except iOS 9).

https://news.ycombinator.com/item?id=10615829

Re: Dell shipping laptop with rogue self-signed root CA

#19

Post by gootdude » Mon, Nov 23, 2015, 5:36 PM UTC

01Michael10 wrote: post #13

One should always do a clean install of Windows with a OEM disc when buy a new PC. You can avoid a lot of issues that way...

Lenovo uses Microsoft Windows Platform Binary Table to install bloatware, which gets around any kind of clean install/reset.

Clean install for Windows means nothing when you have shady vendors utilizing this mechanism.

Re: Dell shipping laptop with rogue self-signed root CA

#20

Post by astrodust » Mon, Nov 23, 2015, 5:45 PM UTC

wlesieutre wrote: post #16

01Michael10 wrote: post #13

One should always do a clean install of Windows with a OEM disc when buy a new PC. You can avoid a lot of issues that way...

Or buy "Signature Edition" from Microsoft http://www.microsoftstore.com/store/msusa/en_US/cat/Signatur...

So buy it twice to get a good copy?

Microsoft really needs to reel in the bad behaviour on the part of the OEMs.