eMudhra Exits TLS Certificate Business After Misusing a Private Key

·1 views

Certificate authority eMudhra has withdrawn from the TLS business following a security failure. A flawed key signing ceremony reportedly used a certificate private key in a way that allowed web credentials to be minted for any site. The incident undermines trust in the company's certificate issuance, which is central to securing HTTPS connections. The article's details are limited to the summary provided, so specifics such as dates and the full scope of affected certificates are not covered here.

Read the full story at Ars Technica

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Rivian acquires world model startup to speed up self-driving development

Electric vehicle maker Rivian has bought a startup that builds world models, AI systems that simulate how environments behave. The acquisition is intended to accelerate the company's self-driving ambitions. Financial terms of the deal were not disclosed. The source article provides few additional details beyond the purchase and its stated purpose.

0 comments Read more at TechCrunch

TechnologyThe Verge ·

Legal experts say Meta's revised AI terms still allow scraping of news sites

Meta has revised its business terms to remove wording that suggested it could freely train its AI models on news websites such as The Verge. Legal experts argue the changes do not go far enough, as language about content "associated with your products or services" could still permit scraping of entire sites. James Grimmelmann, a digital and information law professor at Cornell Law School, said the edit does nothing to restrict that phrasing. The original terms for business accounts had appeared to grant Meta permission to train its AI on news content. The updated terms are set to take effect on October 30th.

0 comments Read more at The Verge

TechnologyThe Verge ·

Meta restores Muse sharing after researchers flag exposed conversation links

Meta has re-enabled sharing for its Muse feature after it had been paused. Security researchers at Claroc reported that the web addresses for shared Muse conversations were derived from conversation titles and published in public DNS, making them easy to discover. The researchers said they found shared pages containing a marketing firm's internal revenue review and a small business owner's loan application. Ars Technica reported that Meta had paused the sharing feature after being contacted about the issue. Meta's David Singleton addressed the matter in a post on X.

0 comments Read more at The Verge

TechnologyThe Verge ·

FCC Blocks Two Gadgets Over Chips It Calls Foreign Surveillance Threats

The Federal Communications Commission has used a power it granted itself in October to block devices containing chips from companies on its national security threat list. This marks the first time the agency has exercised that authority. The FCC says the two gadgets contained foreign surveillance chips, though it has not publicly identified which devices were blocked. The chip named by the agency is a HiVision Hi3516CV610 system-on-chip, which converts a raw camera sensor into functions like home security cameras or dashcams. The full details of the action had not been independently confirmed at the time of reporting.

0 comments Read more at The Verge