Hacking for ChristGervase MarkhamRoot Key Store Weak Key Check- June 3, 2008 Recently, a flaw was discovered in the version of OpenSSL shipped with certain Debian and Ubuntu systems, such that they generated only a very limited number of different, and predictable, keys. This has the potential to affect both SSH and SSL keys. It would therefore be rather a big problem if any root certificates in our root store were generated on systems with weak RNGs - because attackers could then forge certificates for any website, and Firefox would trust them. Fortunately, we have...http://weblogs.mozillazine.org/gerv/archives/2008/06/root_key_store_weak_key_check.html Firefox 3 Mozilla 10th Anniversary Parties- June 2, 2008 The Mozilla project has a long and distinguished history of holding global distributed parties to celebrate major events in the project's life, including at the South Pole. I'm pleased to say that we are doing this again - mozillaparty.com is now open for business, for booking parties to celebrate the release of Firefox 3 and also Mozilla's 10th anniversary. There are 183 at the time of writing; last time, we got up to 389, so it would be good to have even more than that. When's a good day...http://weblogs.mozillazine.org/gerv/archives/2008/06/firefox_3_mozilla_10th_anniver.html |