Few independents covering this yet — worth a closer look.
Summary
The certification authority eMudra Services has been negligent with its private keys, allowing a person to pretend to be visiting a bank website and become a target for fraudsters. This is a poor track record on cyber security that threatens each Indian in a digital India.
From the report
Today is October 22nd and yesterday we became aware of continuing incompetence with our cyber security. eMudra Services, which is a certification authority, quite simply, an entity that signs those certificates which are padlocks on those websites and enables us to verify that website is actually of the bank which we are wanting to visit, has been negligent with its private keys. Now these private keys need to have long alphanumeric numbers, but guess what was the secret and unguessable private key which was created by eMudra? Out of the eight which have been one had just the number 4 which is the number of pause my cat has now what it would have allowed a person to do is pretend that you are visiting your bank website having the same front but also having that same padlock thereby you trusting that website and then by you putting in your username and password and becoming a target for fraudster this goes and sits alongside the data breach also which is reported by SBI yesterday on which we have also issued a statement and continues a poor track record on cyber security which threatens each Indian in a digital India The security vulnerability has a very wide attack surface and has brought us international shame and embarrassment. This requires a structural fix, which is why we have not only returned to eModera to conduct an audit, but also returned to the Ministry of Electronic…
Lead take from The Wire · always check the original on YouTube
1 independents covering this
Summary
The certification authority eMudra Services has been negligent with its private keys, allowing a person to pretend to be visiting a bank website and become a target for fraudsters. This is a poor track record on cyber security that threatens each Indian in a digital India.
“This requires a structural fix, which is why we have not only returned to eModera to conduct an audit, but also returned to the Ministry of Electronics and IT, particularly the controller of certification authorities, which licenses eModera, and also to CertIn, which is the computer emergency response team, which is our cyber security agency.”From the report
Today is October 22nd and yesterday we became aware of continuing incompetence with our cyber security. eMudra Services, which is a certification authority, quite simply, an entity that signs those certificates which are padlocks on those websites and enables us to verify that website is actually of the bank which we are wanting to visit, has been negligent with its private keys. Now these private keys need to have long alphanumeric numbers, but guess what was the secret and unguessable private key which was created by eMudra? Out of the eight which have been one had just the number 4 which is the number of pause my cat has now what it would have allowed a person to do is pretend that you are visiting your bank website having the same front but also having that same padlock thereby you trusting that website and then by you putting in your username and password and becoming a target for fraudster this goes and sits alongside the data breach also which is reported by SBI yesterday on which we have also issued a statement and continues a poor track record on cyber security which threatens each Indian in a digital India The security vulnerability has a very wide attack surface and has brought us international shame and embarrassment. This requires a structural fix, which is why we have not only returned to eModera to conduct an audit, but also returned to the Ministry of Electronic…
Watch the original on YouTube — we don't rehost full video.