GoSign is a desktop client used across Italian public administrations and enterprises for qualified electronic signatures, produced by Tinexta InfoCert, one of Europe’s major eIDAS-regulated trust service providers. Researchers found that versions ≤ 2.4.0 disable TLS certificate verification when a proxy is configured and use an unsigned update manifest. Combined, these flaws allow man-in-the-middle attacks and delivery of malicious updates leading to remote code execution.
GoSign Desktop RCE flaws affecting users in Italy
1–10 of 30 posts
Re: GoSign Desktop RCE flaws affecting users in Italy
#2[deleted]
Re: GoSign Desktop RCE flaws affecting users in Italy
#3[deleted]
Re: GoSign Desktop RCE flaws affecting users in Italy
#4Paris
Cloudflare
Error
Re: GoSign Desktop RCE flaws affecting users in Italy
#5Paris Cloudflare Error
AI scrapes internet from millions of IPs worldwide proving an orchestrated, intelligent, botnet effectually becoming a large percentage of total internet traffic overnight.
Internet responds by retreating to behind a single cloud provider who can mysteriously keep ai at bay... Same provider network is probably responsible for the near instantaneous distribution of AI traffic to begin with.
Internet's last bastion of hope is attacked, rather quickly, and half of the internet is scrambling to remember how to administer DNS (The other half never knew).
Re: GoSign Desktop RCE flaws affecting users in Italy
#6Paris Cloudflare Error
AI scrapes internet from millions of IPs worldwide proving an orchestrated, intelligent, botnet effectually becoming a large percentage of total internet traffic overnight. Internet responds by retreating to behind a single cloud provider who can mysteriously keep ai at bay... Same provider network is probably responsible for the near instantaneous distribution of AI traffic to begin with. Internet's last bastion of…
[deleted]
Re: GoSign Desktop RCE flaws affecting users in Italy
#7Paris Cloudflare Error
AI scrapes internet from millions of IPs worldwide proving an orchestrated, intelligent, botnet effectually becoming a large percentage of total internet traffic overnight. Internet responds by retreating to behind a single cloud provider who can mysteriously keep ai at bay... Same provider network is probably responsible for the near instantaneous distribution of AI traffic to begin with. Internet's last bastion of…
Cloudflare was already a thing before AI scrapers
Re: GoSign Desktop RCE flaws affecting users in Italy
#8Paris Cloudflare Error
AI scrapes internet from millions of IPs worldwide proving an orchestrated, intelligent, botnet effectually becoming a large percentage of total internet traffic overnight. Internet responds by retreating to behind a single cloud provider who can mysteriously keep ai at bay... Same provider network is probably responsible for the near instantaneous distribution of AI traffic to begin with. Internet's last bastion of…
what is this "AI" your referring to?
Re: GoSign Desktop RCE flaws affecting users in Italy
#9Paris Cloudflare Error
Bonjour!
Re: GoSign Desktop RCE flaws affecting users in Italy
#10Paris Cloudflare Error
Cloudflare yet again making the internet a shittier place. I will never understand why so many people willingly allow their website to be MiTM’d by this garbage company.