GlobalSign stops issuing certificates after DigiNotar hacker boast

GlobalSign

Certificate authority GlobalSign has stopped issuing new security certificates after a hacker who claimed responsibility for last week’s breach of DigiNotar claimed to have access to four more certificate authorities—specifically naming GlobalSign. As a precaution, GlobalSign as temporarily stopped issued new security certificates until it can complete an investigation; the company also announced it has hired Dutch cyber-security firm Fox-IT to assist—Fox-IT just helped out with the investigation of the DigiNotar breach.

“GlobalSign takes this claim very seriously and is currently investigating,” the company wrote.

GlobalSign’s move comes after an anonymous post surfaced on Pastebin, claiming to be from the attacker who recently issued several hundred bogus security certificates from DigiNotar (including one for Google). The Pastebin account was the same one used someone claiming to have previously breached the Comodo certificate authority. The attacker has also given interviews, and claims to be a 21 year-old Iranian.

In theory, the bogus certificates could be used to intercept secured communications with a Web site via a man-in-the-middle attack. Both Fox-IT and Trend Micro have noted that a large number of IP addresses connecting to Google and authenticating via DigiNotar after the breach were from Iran.

In the meantime, Dutch telecommunications firm KPN says its Getronics unit is picking up new business from former DigiNotar customers. Major desktop Web browsers have issued updates invalidating all security certificates issued by DigiNotar in order to protect users from possible security threats.

However, smartphone users may still be at risk: no smartphone or mobile OS makers (including Google and Apple) have announced plans to revoke DigiNotar certificates on devices running their operating system. This means those devices are, in theory, still susceptible to man-in-the middle attacks that would enable others to spy on communications. Given that one of the bogus certificates was issued for Google, the threat to Android users could be significant.

Apple, Google, and other smartphone OS makers must work with carriers to get updates to their users, even in the case of serious security issues like the DigiNotar breach.

Cars

2019 Chevrolet Silverado gets serious about MPG with new four-cylinder engine

In an aggressive bid to improve fuel economy, the 2019 Chevrolet Silverado will be offered with a 2.7-liter turbocharged four-cylinder engine. Chevy claims comparable performance to other Detroit automakers' V6 trucks.
Movies & TV

'Prime'-time TV: Here are the best shows on Amazon Prime right now

There's more to Amazon Prime than free two-day shipping, including access to a number of phenomenal shows at no extra cost. To make the sifting easier, here are our favorite shows currently streaming on Amazon Prime.
Movies & TV

Stay inside this summer with the best shows on Hulu, including 'Castle Rock'

It's often overwhelming to navigate Hulu's robust library of TV shows. To help, we've put together a list of the best shows on Hulu, whether you're into frenetic cartoons, intelligent dramas, or anything in between.
Movies & TV

The best shows on Netflix in October, from 'Mindhunter’ to ‘The Good Place’

Looking for a new show to binge? Lucky for you, we've curated a list of the best shows on Netflix, whether you're a fan of outlandish anime, dramatic period pieces, or shows that leave you questioning what lies beyond.
Computing

Which is best: The Lenovo ThinkPad X1 Extreme or the 15-inch MacBook Pro?

To try and help nail down the best 15-inch laptops in the world, we compared the Lenovo ThinkPad X1 Extreme vs. MacBook Pro 15 in a head to head that looked at their power, design, and portability.
Computing

Microsoft co-founder, Seahawks owner Paul Allen dies at 65

Microsoft co-founder Paul Allen died on October 15 of complications from non-Hodgkin's lymphoma. The cancer survivor was best known for his entrepreneurial spirit and his frequent contributions to charities.
Product Review

Don't bother with any other 2-in-1. The Surface Pro 6 is still the best

The Surface Pro been updated to its sixth generation, now coming dressed in black and packing a quad-core processor. Outside of that, you’ll have to dig a little deeper to see where Microsoft has made some truly noteworthy improvements.
Computing

How does Microsoft’s newest Surface stack up against the Apple iPad Pro?

In an era where everyone is taking a bite at Apple’s products, we’ve stacked up the 12.9-inch iPad Pro against the latest Surface Pro 6. Check out this comparison guide to see which one gives you more bang for your buck.
Computing

Leaked benchmarks suggest rumored AMD GPU could be king of midrange graphics

AMD's next GPU may not be Navi-based after all. Rumors continue to build about an RX 590 which has now shown up on 3DMark's benchmark database, delivering results that easily outstrip stock clocked GTX 1060s.
Emerging Tech

Curious how A.I. 'brains' work? Here's a super-simple breakdown of deep learning

What is deep learning? A branch of machine learning, this field deals with the creation of neural networks that are modeled after the brain and adept at dealing with large amounts of human-oriented data, like writing and voice commands.
Computing

Qualcomm’s ‘Snapdragon 1000’ could bring octa-cores to Windows laptops

The rumored Qualcomm Snapdragon 1000 CPU may bring the octa-core design of mobiles and tablets to Windows laptops, offering four powerful cores for high performance, and four low-power cores for efficiency.
Computing

Is the new Surface Pro 6 worth the extra money or is the Surface Go good enough?

Each of Microsoft’s Surface devices are great, but with the recent addition of the Surface Pro 6, you might be wondering how it stacks up against the Surface Go. In this comparison piece, we’ve put the two devices up against each other…
Computing

Is the Surface Pro 6 a sidestep, or does it blow away its predecessor?

How good is the new Surface Pro, and is it worth an upgrade? The best way to find out is to pit the Surface Pro 6 vs. Surface Pro 5 in a head to head that tests them both on performance, design, and portability.
Computing

These gloves will make virtual reality feel even more immersive

Scientists from EPFL and ETH Zurich have come up with a thin and light VR glove which makes it so that a touch of an object in the virtual world equates to the physical touch you would expect in real life.