Live data from Hacker News

A message from Comodo Hacker

pastebin.com

11–20 of 44 posts

Re: A message from Comodo Hacker

#12
post #7

> At first I decided to hack RSA algorithm, I did too much investigation on SSL protocol, tried to find an algorithm for factoring integer, analyzed existing algorithms, for now I was not able to do so, at least not yet, but I know it's not impossible and I'll prove it Huh. He kind of lost all credibility at that point. Breaking RSA isn't something you just decide to do. I'll wait for the day when he announces he's b…

Hasn't everyone woken up some day and said "hey, I'm gonna break RSA today"? I guess that only happens when you have the experience of 1000 hackers...

Re: A message from Comodo Hacker

#17
post #7

> At first I decided to hack RSA algorithm, I did too much investigation on SSL protocol, tried to find an algorithm for factoring integer, analyzed existing algorithms, for now I was not able to do so, at least not yet, but I know it's not impossible and I'll prove it Huh. He kind of lost all credibility at that point. Breaking RSA isn't something you just decide to do. I'll wait for the day when he announces he's b…

The math in these algorithms is not the vulnerable part of the process. It is almost always the implementation or the implementers that are exploited.

Re: A message from Comodo Hacker

#19
I crossed paths with the guys behind globaltrust.it years ago. I ended up auditing a code project they had written for a co. in the financial services industry that required good security, audit trails, client authentication etc.

After the third remote exploit that I found, my recommendation was that they throw it out and start again, it was a huge jumble of PHP. This hurt their feelings, and a 6 month long argument ensued where they defended their competency.

When I heard 'Italian certificate provider' last week, I thought it could be them, because they went on to launch a certificate project. I am more surprised that Comodo didn't do any due diligence on their resellers. All they had to do was to email my client to ask how their project went, and they would have found out about the clusterfuck.

Re: A message from Comodo Hacker

#20
post #7

> At first I decided to hack RSA algorithm, I did too much investigation on SSL protocol, tried to find an algorithm for factoring integer, analyzed existing algorithms, for now I was not able to do so, at least not yet, but I know it's not impossible and I'll prove it Huh. He kind of lost all credibility at that point. Breaking RSA isn't something you just decide to do. I'll wait for the day when he announces he's b…

I came here to post exactly that.

After reading him state how astonishing his skills are and how he'll tackle the integer factorization problem, I thought to myself, "he must be a 20 years old university student." Then he states his age.

Post reply on HN