Skip to main content

Fake SSL certificate DigiNotar impersonate Gmail and other Google services

Google Inc reported a fradulent SSL certificate issued by DigiNotar Certificate Authority (CA) that is "valid for *.google.com. A possible man-in-the-middle (MITM) attacks against Google users, whereby someone tried to get between them and encrypted Google services, can be launched. The people affected were primarily located in Iran. According to a post published on Sunday by a user calling himself alibo, the counterfeit certificate surfaced when he tried to log into his Gmail account using the Google Chrome browser.

Google Chrome users were protected from this attack because Chrome was able to detect the fraudulent certificate. To further protect the safety and privacy of our users, Google will disable the DigiNotar certificate authority in Chrome while investigations continue. Mozilla and Microsoft also moved quickly to protect its users soon after. This means that Chrome and Firefox users will receive alerts if they try to visit websites that use DigiNotar certificates.

» An update on attempted man-in-the-middle attacks | Google Online Security Blog
Labels:

Popular Posts

Ho Ching named 5th most powerful and is mistaken as first lady by Forbes

Forbes named Singapore Prime Minister wife and CEO of Temasek Holdings, Ho Ching, as the 5th most powerful woman in the world. Ho Ching is mistaken as Singapore's first lady! OMG!

I wonder how can Forbes makes such a blunder. For a complete list, refer to here.
Read more

How to stop FortiClient from starting automatically?

Installed FortiClient recently but the challenge in disabling the application/service from running automatically on every start-up annoyed me. Attempt to stop 'FortiClient Service Scheduler' only return 'Parameter is incorrect' error message.

An article on Technet help solve my trouble. To stop FortiClient from starting automatically, try the following:
Shut down FortiClient from the system tray.
Run net stop fortishield on command prompt.
Run msconfig.
On msconfig, switch to the Services tab. Clear the FortiClient Service Scheduler check box and click Apply.Run services.msc on command prompt to open up show all available services.Look for FortiClient Service Scheduler. Switch Startup type to Manual.Restart your computer. FortiClient should not be running automatically the next time round. Hope it helps.
Read more