Skip to content

Instantly share code, notes, and snippets.

@XaviTorello
XaviTorello / netgear-private-key-disclosure.md
Created January 22, 2020 00:03 — forked from nstarke/netgear-private-key-disclosure.md
Netgear TLS Private Key Disclosure through Device Firmware Images

Netgear Signed TLS Cert Private Key Disclosure

Overview

There are at least two valid, signed TLS certificates that are bundled with publicly available Netgear device firmware.

These certificates are trusted by browsers on all platforms, but will surely be added to revocation lists shortly.

The firmware images that contained these certificates along with their private keys were publicly available for download through Netgear's support website, without authentication; thus anyone in the world could have retrieved these keys.

@XaviTorello
XaviTorello / netgear-private-key-disclosure.md
Created January 22, 2020 00:03 — forked from nstarke/netgear-private-key-disclosure.md
Netgear TLS Private Key Disclosure through Device Firmware Images

Netgear Signed TLS Cert Private Key Disclosure

Overview

There are at least two valid, signed TLS certificates that are bundled with publicly available Netgear device firmware.

These certificates are trusted by browsers on all platforms, but will surely be added to revocation lists shortly.

The firmware images that contained these certificates along with their private keys were publicly available for download through Netgear's support website, without authentication; thus anyone in the world could have retrieved these keys.

@XaviTorello
XaviTorello / backends.py
Created February 14, 2020 15:56
AppleId custom new backends with different settings
# file: an_app/backends.py
from social_core.backends.apple import AppleIdAuth
"""
It provides 2 backends that extends the AppleID base auth
Useful to be able to define different configs depending on the singin scenario
The name will be used to fetch concrete settings and link it at the `provider` field (or the `/jwt-pair/$name` URI)