Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 


Forgot your password?
Close
typodupeerror

Comment Re:Ok, so dumb question (Score 2) 159

Better. Almost all certificate renewals from a modern CA can be automated, old certificates get cycled out, new ones get cycled in. Apple's not actually the bad guy in this fight, in my opinion.

Also from my point of view, there's lower impact to the overall chain if an intermediate or root certificate is invalidated or worse, compromised, because while the number of issued certificates are higher, the process is more frequent.

I'd guess (but don't know) much of the pushback is from the older CAs that have not kept up with the times and are already losing ground to Let's Encrypt and the certificate managers run by cloud providers like AWS' Certificate Manager and Azure's App Service Certificates. It was the older CA's that originally pushed for a differential in the display of "extended verification" certificates, but nobody has really noticed that the "EV" portion has basically dropped out of the public view - which is fine, EV always seemed like a money grab to me by the CAs anyway.
Security

Sophisticated Apache Backdoor In the Wild 108

Posted by samzenpus from the protect-ya-neck dept.
An anonymous reader writes "ESET researchers, together with web security firm Sucuri, have been analyzing a new threat affecting Apache webservers. The threat is a highly advanced and stealthy backdoor being used to drive traffic to malicious websites carrying Blackhole exploit packs. Researchers have named the backdoor Linux/Cdorked.A, and it is the most sophisticated Apache backdoor seen so far. The Linux/Cdorked.A backdoor does not leave traces on the hard-disk other than a modified 'httpd' file, the daemon (or service) used by Apache. All information related to the backdoor is stored in shared memory on the server, making detection difficult and hampering analysis."
Mars

New Study Suggests Mars Viking Robots Found Life 172

Posted by samzenpus from the it's-alive-alive dept.
techfun89 writes "New analysis of data, now 36 years old, from the Viking robots, suggests that NASA had found life on Mars. This conclusion was published by an international team of mathematicians and scientists this week. The Labeled Release experiment looked for signs of microbial metabolism in soil samples in 1976. The general thinking was that the experiment had found geological not biological activity. However, the new study approached things differently. Researchers broke the data into sets of numbers and analyzed the results for complexity. What they found were close correlations between the Viking results' complexity and those of terrestrial biological data sets. Based on this they concluded that the Viking results were more biological in nature than just geological processes."

Slashdot Top Deals

Almost anything derogatory you could say about today's software design would be accurate. -- K.E. Iverson

Close