driverdan

Netgear Signed TLS Cert Private Key Disclosure

Overview

There are at least two valid, signed TLS certificates that are bundled with publicly available Netgear device firmware.

These certificates are trusted by browsers on all platforms, but will surely be added to revocation lists shortly.

The firmware images that contained these certificates along with their private keys were publicly available for download through Netgear's support website, without authentication; thus anyone in the world could have retrieved these keys.

driverdan

git log --oneline HEAD...previous_hash

driverdan

# Source: https://stackoverflow.com/a/46710435
import logging

# Set level to the logging level you want to use.
# This will typically be INFO or DEBUG.
level = logging.INFO

logger = logging.getLogger()
logger.setLevel(level)
for handler in logger.handlers:

driverdan

import django.apps

for model in django.apps.apps.get_models():  
    print(model._meta.label)
    for field in model._meta.get_fields():
        print(f"    {field.name}")

driverdan

cask_args appdir: '/Applications'

brew 'autoconf'
brew 'automake'
brew 'awscli'
brew 'bash-completion'
brew 'ctags'
brew 'curl'
brew 'git'
brew 'go'

driverdan

console.log('Starting...');

var dgram = require('dgram');
var os = require('os');

// Create UDP client
var client = dgram.createSocket('udp4');

// Colors to use
var good = new Buffer('green');

driverdan

var dgram = require('dgram');
// Create UDP client
var client = dgram.createSocket('udp4');

// Define all the colors
var colors = [
  'black',
  'blue',
  'cyan',
  'green',

driverdan

var XMLHttpRequest = require("../XMLHttpRequest").XMLHttpRequest
	,xhr
	,someGlobal = "foo";

console.log("someGlobal: " + someGlobal);

xhr = new XMLHttpRequest();

xhr.onreadystatechange = function() {
	if (this.readyState == 4) {