Xbox live certificate accidentally published.

Discussion in 'Xbox One Development (One,One X)' started by ASSEMbler, Dec 9, 2015.

Watch Thread
  1. ASSEMbler

    ASSEMbler Administrator Staff Member

    Joined:
    Mar 13, 2004
    Messages:
    19,394
    Likes Received:
    995
    ASSEMbler, Dec 9, 2015 Report
    #1 + Quote Reply
  2. XboxSurgeon

    XboxSurgeon Site Supporter Since 2013

    Joined:
    Nov 18, 2013
    Messages:
    2,109
    Likes Received:
    923
    Interesting...
     
    XboxSurgeon, Dec 10, 2015 Report
    #2 + Quote Reply
  3. rso

    rso Gone. See y'all elsewhere, maybe.

    Joined:
    Mar 26, 2010
    Messages:
    2,190
    Likes Received:
    447
    In b4 eejits going all "omg live's borken!1!". That cert seems to be "only" for the website's https connection, no online (as in game) services are likely to be affected at all. Also note there's no Xboxen listed amongst the affected software.
     
    rso, Dec 10, 2015 Report
    #3 + Quote Reply
    CodeAsm and Bad_Ad84 like this.
  4. ddxcb

    ddxcb Gota J.T.A.G. That Xbone Yo.

    Joined:
    Apr 17, 2008
    Messages:
    388
    Likes Received:
    45
    the xbox one will probably auto update the Cert and that be the end of the attack.
     
    ddxcb, Dec 10, 2015 Report
    #4 + Quote Reply
  5. doulomb

    doulomb Robust Member

    Joined:
    Apr 25, 2013
    Messages:
    237
    Likes Received:
    57
    LMAO, while its obviously not a big deal in terms of the potential damage, this is a key management failure on par with sony's ECDSA rng goof.
    how the hell do you accidentally release the private keys for a certificate like that lmao

    -doulomb
     
    doulomb, Dec 10, 2015 Report
    #5 + Quote Reply
  6. rso

    rso Gone. See y'all elsewhere, maybe.

    Joined:
    Mar 26, 2010
    Messages:
    2,190
    Likes Received:
    447
    > auto update on xbone
    Well, that's also true for the Windowses, and they did list those.

    > how do you even...
    Stupidity, plain and simple. Just look at all the private info on github. SSL keys, user credentials in versioned config files, hardcoded credentials in source code...
     
    rso, Dec 10, 2015 Report
    #6 + Quote Reply
    CodeAsm likes this.
  7. Lukew

    Lukew Rapidly Rising Member

    Joined:
    Sep 18, 2015
    Messages:
    98
    Likes Received:
    80
    [​IMG]
     
    Lukew, Dec 12, 2015 Report
    #7 + Quote Reply
    CodeAsm and XboxSurgeon like this.
sonicdude10
Draft saved Draft deleted
Insert every image as a...
  1.  0%

Share This Page