proxmox

The Strange Microsoft Root Certificate – Mass Surveillance

The Strange Microsoft Root Certificate – Mass Surveillance Enabler? + Q&A

#Strange #Microsoft #Root #Certificate #Mass #Surveillance

“Rob Braxman Tech”

Whoever puts a root certificate on your computer can generate a certificate for any website, even fake ones. Well strangely enough Microsoft Root Certificates, which Microsoft calls a “Private Certificate Authority” is on Microsoft Windows, AND on Linux. What’s up with this?

Basically this…

source

 

To see the full content, share this page by clicking one of the buttons below

Related Articles

44 Comments

  1. Would these strange certificates be in the few de-blobbed fully open source distros? Those endorsed by the Free Software Foundation, like PureOS, and Trisquel OS.

  2. I've always balked at people discussing certs. I raise self-signed certs as a great exercise into who tf are you versus some entity far away you have no idea about. Security is always about what is right in front of you. Take the location away, insert root certs, voila.

  3. I know people that live stream south of you in the middle of the Soren Desert, that get a better signal lol. Are you using a degoogled phone with a VPN and a VPN on the Router for double protection. You should do these on a dedicated channel, just saying lol

  4. question: lets say one highly skilled programmer insert 1 line into a linux distro which allows a backdoor in basically every distro even its open source
    guaranteed is nothing – unless i always listen on wireshark&co and even then … what is besides that a selling point to linux "safety"
    dont get me wrong – i am in favour of privacy, open source – but recently this thought troubles me – who checks those open source distros objectivly with skill

  5. 1:07:11 😱🤯😲 What!? NOOOOOOOOOOOOOOOOOOO!!! Odysee is my FAVORITE!!! Rumble freaking sucks!! They're software and features are absolute crap!!! Worse than YouTube Alpha, and that's saying something for anyone who remembers that far back. The Odysee player experience is a million times better than Rumble. I hope Trump or Andrew Torba buy it and integrate it into their platform.

  6. So keeping and running all my apps on a USB stick, and making a habit of using it on other computers in public places, would keep me fairly anonymous. Unless someone went to cameras and facial ID to trace who was at all the logged locations. No?

  7. thanks for this vid! even pentoo has the MS certs on them, which is interesting. there are also a bunch of other root certs whose utility is unknown. could you do a vid on which root certs you would recommend keeping, and why (eg.which services they would be associated with)?

  8. Rob, could the truth be you are providing key information that cannot be easily censured on this is likely why youtube will ensure algorithm's scores you negative and you get many unknown anomalies

  9. I'm still using the Moto G7 Play you guys de-googled for me over two years ago. I use it with RedPocket pre-paid. $2.50 a month with a year in advance service I bought from their eBay store. RedPocket uses T-Mobile. I was using this same G7 Play the whole time you were saying you wouldn't de-google Moto G7 Play anymore because they stopped working with most carriers. I was on AT&T then, but I've since switched to RedPocket when I found I could get it for $30 a year. I had to learn how to open it up and change out the battery. I had bought the phone refurbished, and the battery eventually stopped taking a charge.

  10. I subscribed from one of your live streams. Will miss em. But this root cert issue only applies to certs that have the "ALL" intended purposes configured. Instead of code signing or client auth etc. You can use the "Digicert" tool to check installs of certs and chains etc.

Leave a Reply