November 2015

Dell Certificate Blunder Not Limited to New Computers

The news that Dell has been bundling a Trusted Certificate Authority to customers of brand new computers has been widely reported in the last few days. If you have not yet caught up with the news, essentially a Dell CA has been bundled with software installed on a new machine, which unfortunately also contains the corresponding private key. This means that anyone who has this private key, which is available to anyone with access to a new Dell computer, can sign any certificate.