Thursday, March 22, 2001

Verisign Issues Bad Certificates -- 1:27 pm CST, Update by The Master

According to a Microsoft security update issued today, Verisign has issued a set of bad code signing certificates that perport to be from "Microsoft Corporation", but are actually owned by someone with no link to Microsoft.

Thankfully, the certificates will NOT automatically run under the Microsoft certificate names, since certificates are checked by certificate data, not the name. However, be VERY careful approving code signed by "Microsoft Corporation" to run on your system without verifying the certificate (ED: Or run Linux-beat ya to it Qbe :-). I would also highly recommend reading the above link to review the issue in detail.

Ouch. For once Microsoft gets caught by a major security issue that they didn't do to themselves, like normal. It's gotta be a first.

News for 03/22/2001

The Haus is powered by:

All original information on this website is copyright © TheHaus.Net, 1999-2005. The use of original images, text, and/or code from this website without expressed written consent is prohibited. The authors of this site cannot be held responsible for any damage, real or imagined, which comes from the use of information presented on this site. All trademarks used are the properties of their respective owners. This site is not to be used as a floatation device (but if you try, I want a video tape of it).