Exploited eMudhra certificate leak enables ad-blocking on Samsung smart TVs via MITM proxy
The exposure of weak cryptographic keys from Indian certificate authority eMudhra has inadvertently opened a pathway for ad-blocking on certain Samsung smart TVs that still trust these compromised certificates. Czech developer Daniel Vrátil leveraged this weakness by using mitmproxy and the leaked certificates to intercept and redirect the TV's ad-serving HTTPS traffic, replacing ads with personalized images and blocking tracking requests. This exploit relies on Samsung TVs not having revoked the vulnerable certificates via firmware updates, and its efficacy will diminish as device updates propagate. The incident highlights the security risks posed by the compromised keys, which allow anyone to forge eMudhra certificates and potentially intercept or spoof device communications.
Linha do tempo
-
Exploited eMudhra certificate leak enables ad-blocking on Samsung smart TVs via MITM proxy
ler a análise desta fonte ocultar
The exposure of weak cryptographic keys from Indian certificate authority eMudhra has inadvertently opened a pathway for ad-blocking on certain Samsung smart TVs that still trust these compromised certificates. Czech developer Daniel Vrátil leveraged this weakness by using mitmproxy and the leaked certificates to intercept and redirect the TV's ad-serving HTTPS traffic, replacing ads with personalized images and blocking tracking requests. This exploit relies on Samsung TVs not having revoked the vulnerable certificates via firmware updates, and its efficacy will diminish as device updates propagate. The incident highlights the security risks posed by the compromised keys, which allow anyone to forge eMudhra certificates and potentially intercept or spoof device communications.