Notices by Gonçalo Valério (dethos@s.ovalerio.net)

Javascript programmers, do you use `eslint`? pay attention to this:

https://github.com/eslint/eslint-scope/issues/39

that github organization has been somewhat compromised, please check the version you use, and stay tunned.

#security #infosec #javascript

Not sure what is more shocking:

A CA having 23k private keys of their customer's certs and the CEO emailing them: http://blog.koehntopp.info/index.php/3075-how-not-to-run-a-ca/

A CA having a website which allows RCE as root, from a website input: https://arstechnica.com/information-technology/2018/03/trustico-website-goes-dark-after-someone-drops-critical-flaw-on-twitter/

I'm just speechless.

#security #infosec #netsec