<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Is DarkMatter an evil spying empire? in Tech Talk</title>
    <link>https://community.isc2.org/t5/Tech-Talk/Is-DarkMatter-an-evil-spying-empire/m-p/25327#M1531</link>
    <description>&lt;P&gt;Mozilla says they will no longer trust root certificates from the UAE firm &lt;A href="https://www.darkmatter.ae/" target="_blank" rel="noopener"&gt;DarkMatter&lt;/A&gt;, ending&amp;nbsp;months of discussion (in Google groups &lt;A href="https://groups.google.com/forum/#!msg/mozilla.dev.security.policy/nnLVNfqgz7g/TseYqDzaDAAJ" target="_blank" rel="noopener"&gt;here&lt;/A&gt;) trying to stay white-listed in Firefox. They have contributed to&amp;nbsp;&lt;A href="https://www.darkmatter.ae/press-release/darkmatter-group-analysis-of-major-uae-data-leak/" target="_blank" rel="noopener"&gt;exposing APT34&lt;/A&gt; and other threats. Are they evil? &lt;A href="https://theintercept.com/2019/06/12/darkmatter-uae-hack-intercept/" target="_blank" rel="noopener"&gt;The Intercept&lt;/A&gt; seems to think so.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;On a side note have you wondered about how many CA certificates are included in a &lt;A href="https://curl.haxx.se/docs/caextract.html" target="_blank" rel="noopener"&gt;Mozilla bundle&lt;/A&gt;? If you are building/delivering a software platform then you need to keep your &lt;STRONG&gt;cacert.pem&lt;/STRONG&gt; up-to-date!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Date&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;Certificates&lt;/P&gt;&lt;TABLE&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2019-05-15.pem" target="_blank" rel="noopener"&gt;2019-05-15&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;140&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2019-01-23.pem" target="_blank" rel="noopener"&gt;2019-01-23&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;135&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2018-12-05.pem" target="_blank" rel="noopener"&gt;2018-12-05&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;128&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2018-10-17.pem" target="_blank" rel="noopener"&gt;2018-10-17&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;129&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2018-06-20.pem" target="_blank" rel="noopener"&gt;2018-06-20&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;132&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2018-03-07.pem" target="_blank" rel="noopener"&gt;2018-03-07&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;133&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2018-01-17.pem" target="_blank" rel="noopener"&gt;2018-01-17&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;138&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2017-09-20.pem" target="_blank" rel="noopener"&gt;2017-09-20&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;143&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2017-06-07.pem" target="_blank" rel="noopener"&gt;2017-06-07&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;155&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2017-01-18.pem" target="_blank" rel="noopener"&gt;2017-01-18&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;158&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;</description>
    <pubDate>Mon, 15 Jul 2019 17:57:44 GMT</pubDate>
    <dc:creator>AppDefects</dc:creator>
    <dc:date>2019-07-15T17:57:44Z</dc:date>
    <item>
      <title>Is DarkMatter an evil spying empire?</title>
      <link>https://community.isc2.org/t5/Tech-Talk/Is-DarkMatter-an-evil-spying-empire/m-p/25327#M1531</link>
      <description>&lt;P&gt;Mozilla says they will no longer trust root certificates from the UAE firm &lt;A href="https://www.darkmatter.ae/" target="_blank" rel="noopener"&gt;DarkMatter&lt;/A&gt;, ending&amp;nbsp;months of discussion (in Google groups &lt;A href="https://groups.google.com/forum/#!msg/mozilla.dev.security.policy/nnLVNfqgz7g/TseYqDzaDAAJ" target="_blank" rel="noopener"&gt;here&lt;/A&gt;) trying to stay white-listed in Firefox. They have contributed to&amp;nbsp;&lt;A href="https://www.darkmatter.ae/press-release/darkmatter-group-analysis-of-major-uae-data-leak/" target="_blank" rel="noopener"&gt;exposing APT34&lt;/A&gt; and other threats. Are they evil? &lt;A href="https://theintercept.com/2019/06/12/darkmatter-uae-hack-intercept/" target="_blank" rel="noopener"&gt;The Intercept&lt;/A&gt; seems to think so.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;On a side note have you wondered about how many CA certificates are included in a &lt;A href="https://curl.haxx.se/docs/caextract.html" target="_blank" rel="noopener"&gt;Mozilla bundle&lt;/A&gt;? If you are building/delivering a software platform then you need to keep your &lt;STRONG&gt;cacert.pem&lt;/STRONG&gt; up-to-date!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Date&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;Certificates&lt;/P&gt;&lt;TABLE&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2019-05-15.pem" target="_blank" rel="noopener"&gt;2019-05-15&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;140&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2019-01-23.pem" target="_blank" rel="noopener"&gt;2019-01-23&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;135&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2018-12-05.pem" target="_blank" rel="noopener"&gt;2018-12-05&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;128&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2018-10-17.pem" target="_blank" rel="noopener"&gt;2018-10-17&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;129&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2018-06-20.pem" target="_blank" rel="noopener"&gt;2018-06-20&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;132&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2018-03-07.pem" target="_blank" rel="noopener"&gt;2018-03-07&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;133&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2018-01-17.pem" target="_blank" rel="noopener"&gt;2018-01-17&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;138&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2017-09-20.pem" target="_blank" rel="noopener"&gt;2017-09-20&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;143&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2017-06-07.pem" target="_blank" rel="noopener"&gt;2017-06-07&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;155&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;&lt;A href="https://curl.haxx.se/ca/cacert-2017-01-18.pem" target="_blank" rel="noopener"&gt;2017-01-18&lt;/A&gt;&lt;/TD&gt;&lt;TD&gt;158&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;</description>
      <pubDate>Mon, 15 Jul 2019 17:57:44 GMT</pubDate>
      <guid>https://community.isc2.org/t5/Tech-Talk/Is-DarkMatter-an-evil-spying-empire/m-p/25327#M1531</guid>
      <dc:creator>AppDefects</dc:creator>
      <dc:date>2019-07-15T17:57:44Z</dc:date>
    </item>
  </channel>
</rss>

