Alexander Sotirov

phreedom.org

This year Dino Dai Zovi and I are teaching our Assured Exploitation class again at the CanSecWest conference. This is a two day training on March 7-8, focusing on on the advanced exploitation techniques required for developing state of the art exploits for the latest Windows 7 systems.

Popular posts: 1
Total points: 107
HN comments: 55
Rank: #20,371 personal

Visit phreedom.org → RSS feedOn Hacker News Dec 2008 – Dec 2008

Security & Privacy 1 Math & Algorithms 1

Most points Most discussed Most cited Newest

Creating a rogue CA certificate with MD5 hash collisions

2008107 points55 commentscited by 3Security & Privacy details

We have identified a vulnerability in the Internet Public Key Infrastructure (PKI) used to issue digital certificates for secure websites. As a proof of concept we executed a practical attack scenario and successfully created a rogue Certification Authority (CA) certificate trusted by all common web browsers. This…