Xbox Live private keys mistakenly disclosed, says Microsoft
Microsoft statement did not list the source of the leaks but the company said that the leaked keys have so far not been used in any cyber attack.
In the security advisory released Wednesday, Microsoft said it has invalidated the leaked certificate. “To help protect customers from potentially fraudulent use of the SSL/TLS digital certificate, the certificate has been deemed no longer valid and Microsoft is updating the Certificate Trust list (CTL) for all supported releases of Microsoft Windows to remove the trust of the certificate,” reads the advisory. The leaked digital certificate cannot be used to impersonate domains, create new certificates or sign code.
However the biggest concern is that the private keys could be used to mount a in a “man-in-the-middle” attack. Potential hacker could use the leaked Xbox Live private keys to gain access to a secure connection. “Each user in the communication unknowingly sends traffic to and receives traffic from the attacker, all the while thinking they are communicating only with the intended user,” Microsoft explained. A hacker could intercept messages sent between Microsoft and the Xbox Live user. Information or sensitive data could be stolen via this method.
Posted:
Related Forum: Xbox Forum
Source: http://www.techworm.net/2015/12/xbox-live-users-open-to-hack-as-microsoft-accidentally-leaks-private-keys.html
Related Articles
Comments
GT-RPosted:
SakiFaux25 this is why ps4/sony and pc is better gg ms gg shows how protected their stuff is if hackers can access these types of stuff and no im not a fan boy i prefer all systems the same way as most people plus this is mo
lol
Valve has had a scamming and phishing issue for years now and Sony had like 3 major hackings that had customer credit cards and addresses leaked but some SSL certificates become compromised on MS's side and suddenly it's "gg ms"
I really hope you're being a troll.
You couldn't be more wrong. Well you can because every time I see you comment with your post purchase rationalization nonsense you show just how wrong you can be.
KiIIPosted:
Microsoft really need to step their game up, Ive lost so much respect over the last half year. I know it was a mistake but they just keep happening.
LebronIs6Posted:
Sony is so much worse. Throughout the past year Sony have had around 15 outages some going as long as a a couple days. (A.K.A LIZARD SQUAD) Trash Sony
SakiPosted:
Faux25 this is why ps4/sony and pc is better gg ms gg shows how protected their stuff is if hackers can access these types of stuff and no im not a fan boy i prefer all systems the same way as most people plus this is mo
lol
Valve has had a scamming and phishing issue for years now and Sony had like 3 major hackings that had customer credit cards and addresses leaked but some SSL certificates become compromised on MS's side and suddenly it's "gg ms"
I really hope you're being a troll.
CB9Posted:
Faux25 this is why ps4/sony and pc is better gg ms gg shows how protected their stuff is if hackers can access these types of stuff and no im not a fan boy i prefer all systems the same way as most people plus this is mo
Was that sarcasm? I'm pretty sure Sony has had worse leaks lol
Mario350Posted:
this is why ps4/sony and pc is better gg ms gg shows how protected their stuff is if hackers can access these types of stuff and no im not a fan boy i prefer all systems the same way as most people plus this is mo
Latest Downloads
- 01. The Long Drive: SaveGame (American pickup)(0)
- 02. Goemon's Great Adventure (US / NTSC) - Nintendo 64 Game Save(1)
- 03. The Long Drive: SaveGame (blue VW Beetle)(0)
- 04. Deadly Creatures | Complete Savegame(0)
- 05. Driift Mania | 100% Savegame(0)
- 06. LostWinds: Winter of the Melodias | 100% Savegame(0)
- 07. Lost Winds | 100% Savegame(0)
- 08. Mega Man 10 | Savegame(0)
- 09. Mega Man 9 | Savegame(0)
- 10. LASTFIGHT Secret character unlocked(1)
- 11. PC Horizon Forbidden West Complete Save(12)
- 12. Castlevania: The Adventure ReBirth | 100% Savegame(0)
- 13. ExciteBike World Challenge | Savegame(0)
- 14. World of Goo | 100% Savegame(0)
- 15. La Torre de las Sombras | 100% Savegame(0)
Latest Tutorials
- 01. The Redress Of Mira 100% Walkthrough | Trophy & Achievement(398)
- 02. Russian Pinocchio Quick Trophy Guide(483)
- 03. Venatrix Quick Trophy & Achievement Guide(447)
- 04. Call of the Sea 100% Platinum Walkthrough(605)
- 05. Wire Lips 100% Platinum Walkthrough(546)
- 06. The Expanse 100% Platinum Walkthrough | Trophy & Achievement(517)
- 07. Doctor Who: The Edge of Reality - PS4 Platinum P/Thru(443)
- 08. Doctor Who:The Lonely Assassins - 100% Guide(393)
- 09. DAYMARE 1998 PS4 - Full game 100% TROPHY WALKTHROUGH(372)
- 10. Stray Platinum Walkthrough | Trophy & Achievement Guide(401)
- 11. Raji: An Ancient Epic | Complete Gameplay Walkthrough(526)
- 12. Corpse Killer: 25th Anniversary Edition - Longplay(484)
- 13. Song of Horror: Complete Edition Gameplay Walkthrough(360)
- 14. Remoteness 100% All Trophies Walkthrough(460)
- 15. Detective Inspector Mysterious Clues Platinum Walkthrough(446)
"Xbox Live private keys mistakenly disclosed, says Microsoft" :: Login/Create an Account :: 39 comments