πŸ–₯️ SECURITY: πŸ”“ root Certificate Author ...

πŸ–₯️ SECURITY: πŸ”“ root Certificate Authorities & Mitigating Abuses (MUST WATCH)

Nov 11, 2022

πŸ”“ SECURITY: Root Certificates & Detecting Abuse

Covering breaking investigative journalism of Joseph Menn (reputable), and how we can learn from root certificate problems / backdoors in recent history:

[ Watch On Peertube ] (πŸ§… πŸ” Tor Friendly Link)

[ Watch On Invidious ] (πŸ§… πŸ” Tor Browser Only Link)


πŸ“Ί Watch In Post:

(click below to watch on Odysee)

https://youtu.be/TcYQCzhdEuc


Mentioned: πŸ’» Coreboot laptops: IntelME Removed To Maximum Extent & Disabled; contact if interested, or order directly from our shop / commissions.

Brand new / used laptops come with problematic closed source "blackbox" BIOS / UEFI issues removed. Includes problems that may exist on your laptop like Superfish, Computrace, and other unknowns.


Buying a laptop from our shop means all of the above are replaced with open source firmware, compiled personally. Ask if you have a questions. Qubes / Linux available.


πŸ’‘ SOLUTIONS / πŸ›‘οΈ MITIGATION

WINDOWS USERS: Sigcheck

LINUX / APPLE / ALL: check at any given moment, browser https site cert fingerprint, against:

Gitea Onion Fingerprint List (πŸ§… Tor Onion Link For πŸ” Integrity)


πŸ” End-To-End Encryption: Solving Issue Of "Trust"


Try (Where Applicable):

  • I2P

  • Tor Hidden Services For Websites (.onion)


Many mainstream websites now offer Tor hidden service options.

More Known:

Using Tor / I2P means you understand, and utilize security enhancements.

(may add more to this list)


RELATED

Gitea Onion post (by another user): distrusting and removing cert authorities here (Tor Link)


πŸ“‘ SOURCES

[ The Washington Post Article ]

[ Lenovo BIOS Backdoor ] (2015)

[ Dell Superfish-Like Certs ] (2015)

[ Google: SymmanticCerts ]

[ MITM Proxy ]

[ EFF: "You Should Not Trust Russia's Newest Root Cert Authority" ]


πŸ’¬ SHARE COMMENT / QUESTION:

Enjoy this post?

Buy πŸ₯· (RTP) Privacy Tech Tips πŸ“‘ a coffee

More from πŸ₯· (RTP) Privacy Tech Tips πŸ“‘