It's been ten years, so a short story about the "gotofail" bug.
Someone came to me about a catastrophic vulnerability in Apple's TLS implementation.
I shit you not, they'd overheard someone at a bar drunkenly bragging about how they were going to sell it to a FVEY intelligence agency for six figures.
They didn't know exactly what it was, just some vague details and the key point that it allowed use of the real certificate.
This was enough for me to find the bug (yay open source), which would go on to be known as "gotofail", and produce a working exploit in less than a day.
The details were anonymously back channelled to Apple, who released a fix.
npub143w05y7xvyhu85h93gpw3uun0zwza9qtmxlt3qm9y0x2re3a8apq5xpykj (npub143w…pykj) posted on Twitter about it, concerned by Apple's vague release notes.
I used a burner phone to share the details with him anonymously.
Then everyone forgot about the whole thing because heartbleed.
¯\_(ツ)_/¯
Ryan Castellucci :nonbinary_flag: /
npub1l3…pjank
2024-02-01 09:25:29
Author Public Key
npub1l36d5z93zsapdnd27al9ffmja8ashlx34kme473c3ry6rca8gtrs0pjankPublished at
2024-02-01 09:25:29Event JSON
{
"id": "b7bb0b055b5c02d3193dfbd5777f7d867703c228313e274847094a6b80250acd",
"pubkey": "fc74da08b1143a16cdaaf77e54a772e9fb0bfcd1adb79afa3888c9a1e3a742c7",
"created_at": 1706779529,
"kind": 1,
"tags": [
[
"p",
"ac5cfa13c6612fc3d2e58a02e8f393789c2e940bd9beb8836523cca1e63d3f42",
"wss://relay.mostr.pub"
],
[
"p",
"5c06f588380197da5dfbe2e32928b9b6d82c62dac0c602535a09ee1cad5a8221",
"wss://relay.mostr.pub"
],
[
"proxy",
"https://infosec.exchange/users/ryanc/statuses/111855503273600020",
"activitypub"
]
],
"content": "It's been ten years, so a short story about the \"gotofail\" bug.\n\nSomeone came to me about a catastrophic vulnerability in Apple's TLS implementation.\n\nI shit you not, they'd overheard someone at a bar drunkenly bragging about how they were going to sell it to a FVEY intelligence agency for six figures.\n\nThey didn't know exactly what it was, just some vague details and the key point that it allowed use of the real certificate.\n\nThis was enough for me to find the bug (yay open source), which would go on to be known as \"gotofail\", and produce a working exploit in less than a day.\n\nThe details were anonymously back channelled to Apple, who released a fix.\n\nnostr:npub143w05y7xvyhu85h93gpw3uun0zwza9qtmxlt3qm9y0x2re3a8apq5xpykj posted on Twitter about it, concerned by Apple's vague release notes.\n\nI used a burner phone to share the details with him anonymously.\n\nThen everyone forgot about the whole thing because heartbleed.\n\n¯\\_(ツ)_/¯",
"sig": "a8c4b195e13e98712b2757cd6e63226e73d1a057d20ee133d146a3c7686fb3add91e3d1bc9a58bf538c7ebb719ca0060c8bc28278ff0f5ee7b2640cc5baf2f5a"
}