Live data from Hacker News

Tell HN: H&R Block tax software installs a TLS backdoor

news.ycombinator.com

11–19 of 19 posts

Re: Tell HN: H&R Block tax software installs a TLS backdoor

#11

Aren't mac's more secure by default. Receive the warning using mac with h&r block 2025 installed.

These stupid tax software companies' business editions seem to support only MS-Windows. No idea why, they already support macOS on other editions.

Anyone know of any business editions available on macOS?

Re: Tell HN: H&R Block tax software installs a TLS backdoor

#12

Aren't mac's more secure by default. Receive the warning using mac with h&r block 2025 installed.

These stupid tax software companies' business editions seem to support only MS-Windows. No idea why, they already support macOS on other editions. Anyone know of any business editions available on macOS?

> No idea why

Probably because business users on macs are a rounding error, no offense.

Re: Tell HN: H&R Block tax software installs a TLS backdoor

#14
No evidence of this on my windows 11 system, but I'm running the personal HRB software, not business.

Also, a internet search for "WK ATX ServerHost 2024" shows that this certificate is likely related to some other tax software from Walters Kluwer. See https://www.wolterskluwer.com/en/solutions/atx, https://files.cchsfs.com/doc/atx/2024/Help/Content/Both-SSou... and https://support.atxinc.com/

Re: Tell HN: H&R Block tax software installs a TLS backdoor

#17
What exactly do you mean by “H&R Block Business 2025”, as such a version doesn’t exist. Is this a reference to the “H&R Block Premium & Business 2025” software? And is it the installed version, I assume, or the online version?

Clarity really would help as Steve Gibson is flailing about wildly with this limited info and implying that all H&R Block 2025 tax software is affected

Re: Tell HN: H&R Block tax software installs a TLS backdoor

#18

What exactly do you mean by “H&R Block Business 2025”, as such a version doesn’t exist. Is this a reference to the “H&R Block Premium & Business 2025” software? And is it the installed version, I assume, or the online version? Clarity really would help as Steve Gibson is flailing about wildly with this limited info and implying that all H&R Block 2025 tax software is affected

https://www.newegg.com/p/N82E16832732208

^ This software

It installs two separate programs in the installer: H&R Block Premium + State 2025 and H&R Block Business 2025. The first one you can buy separately. The second can only be bought as part of a bundle like from Newegg. The only software I've tested to contain this issue is the Business version. The Premium + State one does NOT have it but I have not spent any time looking for other security issues so I cannot attest there is no other issue. I know it's confusing and that's why I've set up the website for people to easily test to see if they're vulnerable. (Also you can check the video to see both software get installed by the installer you download once you purchase the bundle.)

Post reply on HN