Follow
Headphone software made by Sennheiser has been installing a root certificate, plus the private key, onto people's computers: https://www.secorvo.de/publikationen/headsetup-vulnerability-report-secorvo-2018.pdf …
The reason that this is bad is that anyone can use this key, which is the same on all installations, to forge certificates and impersonate websites.
It's very bad - remember the Sony DRM debacle about 15 years ago where criminals were abusing the DRM to install their own viruses? Yeah, this is the web equivalent.
@0x56 thank you!
@0x56 i know a few musicians who use these mics .. thanks for the info. I will pass it along not sure if they use the software or not. I just remember the name