TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Jeremy Rowley resigns from DigiCert due to mass-revocation incident

130 点作者 CaliforniaKarl9 个月前

18 条评论

braiamp9 个月前
I&#x27;m with amir in comment 23 and with Aaron in previous comments. Stuff happens. And when there are multiple moving pieces, the process and policies are the issue, not the individuals. Since individuals rarely have a complete overview of the entire system.<p>Also, as noted in the comments, it sets a bad precedent for people coming forward reporting issues.
评论 #41178549 未加载
评论 #41177644 未加载
评论 #41177759 未加载
评论 #41177818 未加载
评论 #41177683 未加载
评论 #41177698 未加载
评论 #41177679 未加载
评论 #41177678 未加载
bryan09 个月前
I think this comment from the thread sums it up:<p>“When DigiCert has another incident (and while I have tremendous faith in Tim, it will happen), I would rather that they have Jeremy Rowley with his wisdom and scar tissue around to guide their response and subsequent improvement.”
cebert9 个月前
&gt; “The code worked in our original monolithic system but was not implemented properly when we moved to our micro-services systems.”<p>This could happen to anyone, but imagine being the developer or development team that made this mistake.
upon_drumhead9 个月前
For those of you who don&#x27;t know who he is, he was the Chief Information Security Officer<p><a href="https:&#x2F;&#x2F;www.digicert.com&#x2F;blog&#x2F;author&#x2F;jeremy-rowley" rel="nofollow">https:&#x2F;&#x2F;www.digicert.com&#x2F;blog&#x2F;author&#x2F;jeremy-rowley</a>
McGlockenshire9 个月前
This should probably be a direct link to the comment announcing the resignation: <a href="https:&#x2F;&#x2F;bugzilla.mozilla.org&#x2F;show_bug.cgi?id=1910322#c17" rel="nofollow">https:&#x2F;&#x2F;bugzilla.mozilla.org&#x2F;show_bug.cgi?id=1910322#c17</a>
评论 #41178414 未加载
gklitz9 个月前
&gt; The ultimate root cause ended up being me. I have led the compliance team for the past several years. The fact this went unnoticed in our many reviews during that time shows that we need a different approach to both our internal investigations and compliance controls. I also dropped the ball on the certificate problem report by failing to escalate the issue to engineering and give it the proper attention it deserved. Although I did some investigation, I failed to treat the allegations with sufficient seriousness based on what could have been wrong. I assumed I knew the systems and what was happening in them rather than deeply investigating the report. Finally, I didn’t do enough to eliminate the silos between compliance and engineering.<p>Really does sound like he personally dropped the ball in the handling of the report. It would be interesting to hear the story from the researcher who will undoubtably have been frustrated beyond reason that they kept acting like there was no issue despite the repeated persistent attempts at getting them to take it serious.
langsoul-com9 个月前
I question why we accept someone resigning after making a big mistake.<p>Unless it&#x27;s malice, or the fault truly is entirely on that person, what good would resigning do?<p>Rowley admitted he fucked up, badly, he admitted on several layers what must be changed. How he must change. How the org must change. How the way things are presently is not good enough. Made an extremely deep dive into what happened.<p>And now he&#x27;s leaving??? Someone who royalty messes up, would not want to mess up on the same issue twice. So all that experience is now worthless and doesn&#x27;t benefit Digicert in the slightest.
fallingsquirrel9 个月前
&gt; We note that other customers have also initiated legal action against us to block revocation.<p>This seems crazy to me. In what world does suing your business partner make more sense than clicking some buttons in a UI or running some shell commands to renew your cert?
评论 #41177781 未加载
评论 #41177929 未加载
评论 #41178250 未加载
评论 #41178778 未加载
评论 #41180333 未加载
评论 #41177777 未加载
hugneutron9 个月前
I imagine someone as articulate and humble as that guy is going to land on his feet. That was a really good write up.
amluto9 个月前
One thing I find odd about this: the rules for CAs are long and detailed, but they don’t seem especially complicated. If I were implementing a CA, I would have the main code (their “service oriented architecture” or a monolith or whatever) produce not just an instruction to issue a certificate but a transcript of the entire exchange. Then a completely separate code path (plain old synchronous Rust or Python or Go or Haskell or ML — no microservices) would check the transcript for compliance with each clause of the requirements and block issuance if anything fails. And raise an alert that gets noticed.<p>One could even get fancy and use <i>verifiable</i> randomness for everything in the protocol that is supposed to be random.<p>And then one could refactor some other code with much less worry about messing up.<p>This might also reduce the blast radius from a bug in some other component. If the magic random string generator can be coerced into returning ‘www’, then a separate check would prevent this from compromising everything.<p>(I work in a different industry, and in my industry there is plenty of complex, evolving code, that needs to do the right thing. The more competent players have separate verification code as a double-check.)
mr_toad9 个月前
&gt; We note that other customers have also initiated legal action against us to block revocation.<p>How can it make economic sense to initiate a lawsuit rather than just get new certificates?
评论 #41178418 未加载
评论 #41178473 未加载
xyst9 个月前
I have low expectations from C-level executives. But this incident and his response to it has changed my perspective of them just slightly.<p>It&#x27;s a rare incident where a C-level executive actually takes accountability for their fuck up. Shit rolls down hill. He is very likely to end up taking the helm at another place or startup on his own. He is the exact opposite of the CrowdStrike CEO (George Kurtz) that caused an absolute shitstorm compared to DigiCert incident.
Banditoz9 个月前
&gt; We also found that the bug in the code was inadvertently remediated when engineering completed a user-experience enhancement project that collapsed multiple random value generation microservices into a single service.<p>Interesting. What is the value of a microservice that generates random numbers over just using a language&#x27;s SecureRandom equivalent?
评论 #41177882 未加载
评论 #41177762 未加载
23B19 个月前
He resigned with honor, grace and responsibility – and should be applauded.<p>This is what real accountability looks like, and doing so not only preserves the reputation and trustworthiness of his employer, but demonstrates that he is a valuable contributor and trustworthy individual. He will land on his feet as a result.
jtc3319 个月前
I don’t quite follow why a missing underscore results in a security problem. It seems like it must be somehow related to what’s valid for CNAME records?
评论 #41177758 未加载
sneak9 个月前
Given that a revocation is simply a publication of additional data by a CA, and does not directly affect the customer’s systems, how is the TRO in this case not unconstitutional? I’m not a lawyer but it feels like prior restraint, no?
评论 #41178253 未加载
评论 #41187628 未加载
RevEng9 个月前
While I applaud his openness and willingness to take accountability, I agree with others that resigning shouldn&#x27;t be necessary.<p>Resigning is what you do when you are clearly not fit for your post. Jeremy has demonstrated that he is anything but unfit. People that can see where things went wrong, who can communicate such, can come up with changes to fix those issues, and can implement them are exactly what is needed at such a high level of management. Most people would bury the story or claim ignorance, but Jeremy doesn&#x27;t hide anything and takes full responsibility.<p>I wish Jeremy could have stayed and used this honesty and insight to make the necessary changes. Firing a C-level executive when things go wrong doesn&#x27;t fix anything any more than finding a low level engineer to blame and fire. Experienced people learn lessons by making mistakes. It sucks that it happens, but unexpected circumstances can&#x27;t be foreseen. Hindsight is 20&#x2F;20. Now that they know, they know to look out for it and to change the system to prevent it next time.<p>Perhaps he did overlook it. Perhaps he didn&#x27;t respond when he should have. It&#x27;s easy to get complacent. This is a wake up call. I have no doubt that he would be much more attentive and responsive as a result of this, and as such, be exactly what&#x27;s needed for his post.<p>Mistakes don&#x27;t call for sacrifices; they call for systematic changes to prevent making the same mistakes again.<p>Thank you Jeremy for being as forthcoming as you have been. I only wish more C-level execs would do the same. I hope you find a good place to land where you can take this experience and do an even better job. And I hope that whoever replaces you can bring the same rigor and professionalism that your brought.
_3u109 个月前
Sounds like inside baseball