Tuesday, August 30, 2011

Hacker Obtains Google Certificate

This is a scary one. The criminals were able to get hold of a digital certificate good on all Google sites. This would allow them to get hold of your username & password. The certificate was issued by DigiNotar a Dutch company that was aquired by a Chicago based company.

Comodo has claimed that the hack came from the Iranian government, but now a single Iranian hacker is claiming responsibility. Right, just like the Chinese hacks on Google were from individuals in a heavily regulated dictatorship. Not buying it.

Not only was Google hacked, but also MS' Hotmail, Skype & Yahoo Mail. Despite the hackers claim, it is clear the the government was trying to get activists, so they could get info on anti-government attacks.

Now how do you protect yourself? Instead of waiting for Mozilla to release a security update, here is the way to do it. In Firefox click on options, advanced, encryption & then click "view certificates". Scroll down to DigiNotar Root CA, select then click "Delete or Distrust". There you go, done. I have already done this. No I'm not an Iranian activist, but I also don't need my info out there in the hands of any hacker, whether it's an individual or an evil dictatorship.

No comments:

Post a Comment