<story><title>Kaspersky: SSL interception differentiates certificates with a 32bit hash</title><url>https://bugs.chromium.org/p/project-zero/issues/detail?id=978</url></story><parent_chain></parent_chain><comment><author>nxc18</author><text>I don&amp;#x27;t understand how these antivirus vendors are still in business. Even when they do have marginally better detection rates than the built in solution, the licensing, annoying popups, system slowdown, and security-defeating &amp;#x27;features&amp;#x27; make them a losing proposition.&lt;p&gt;Pre-bundled and even purchased AV is so dramatically deleterious to PC performance that MS should kill it as public service. It gives the entire ecosystem a bad reputation and nowadays is completely unnecessary.</text></comment>
<story><title>Kaspersky: SSL interception differentiates certificates with a 32bit hash</title><url>https://bugs.chromium.org/p/project-zero/issues/detail?id=978</url></story><parent_chain></parent_chain><comment><author>dom0</author><text>Besides the obvious badness of the overall system described, things like&lt;p&gt;&amp;gt; The cache is a binary tree, and as new leaf certificates and keys are generated, they&amp;#x27;re inserted using the first 32 bits of MD5(serialNumber||issuer) as the key.&lt;p&gt;You know. That&amp;#x27;s not a mistake. That&amp;#x27;s what a consciously designed-in vulnerability to enable taking over the system looks like.</text></comment>