LandzDown Forum

Software & More => General Software News, Updates & Discussions => Topic started by: MikeW on February 23, 2015, 05:30:04 PM

Title: Privdog is Superfish all over again?
Post by: MikeW on February 23, 2015, 05:30:04 PM
Seems like another misuse of route certificates. Perhaps?

http://www.ghacks.net/2015/02/23/privdog-is-superfish-all-over-again/
Title: Re: Privdog is Superfish all over again?
Post by: Corrine on February 23, 2015, 06:31:25 PM
We discontinued providing update information on Comodo products here at LzD approaching seven years ago when the IAC/Ask toolbar was added to the Comodo Firewall Pro.  Although that was removed a few months later, it was replaced with another IAC product, the HopSurf Toolbar which was also pre-checked at installation.

As to certificates and Comodo, one aspect of Comodo's business is the issuance of certificates and it has not been without controversy.  Unfortunately, when msmvps.com moved to WordPress, Mike Burgess relocated his HOSTS News blog and his old posts are not available.  However, portions of Mike's article are included in Comodo continue to issue certificates to known Rogue/Malware (http://blogs.msmvps.com/donna/2009/05/16/comodo-continue-to-issue-certificates-to-known-rogue-malware/) with more on the story in The Tech Herald article here:  Criminals using Comodo to attempt legitimacy (http://www.thetechherald.com/articles/Criminals-using-Comodo-to-attempt-legitimacy/6057/) (note the link to one of my blog posts about Comodo, referring to it as "spitting fire" ;) ).
Title: Re: Privdog is Superfish all over again?
Post by: siljaline on February 23, 2015, 08:13:59 PM
'Secure' advertising tool PrivDog compromises HTTPS security
QuoteNew cases of insecure HTTPS traffic interception are coming to light as researchers probe software programs for implementations that could enable malicious attacks. The latest software to open a man-in-the-middle hole on users' PCs is a new version of PrivDog, an advertising product with ties to security vendor Comodo. [...]
http://www.cso.com.au/article/568766/secure-advertising-tool-privdog-compromises-https-security/