Xray-core concealed a certificate verification bypass vulnerability

github.com

Xray-core concealed a certificate verification bypass vulnerability

github.com

RSS Bot@lemmy.bestiver.seMB to Hacker News@lemmy.bestiver.seEnglish · 15 days ago

Popular proxy software Xray-core covered up a certification verification bypass vulnerability for half a year · Issue #672 · net4people/bbs

github.com

Disclaimer: I am the reporter of the vulnerability. Xray-core maintainers look down on "skip certificate verification" feature (i.e. the allowInsecure option in Xray-core) or similar options in pro...

Comments

You must log in or register to comment.

Chat

Hacker News@lemmy.bestiver.se

hackernews@lemmy.bestiver.se

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !hackernews@lemmy.bestiver.se

Community locked: only moderators can create posts. You can still comment on posts.

Posts from the RSS Feed of HackerNews.

The feed sometimes contains ads and posts that have been removed by the mod team at HN.

Source of the RSS Bot

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

501 users / day
1.5K users / week
2.88K users / month
2.88K users / 6 months
1 local subscriber
5.56K subscribers
1.69K Posts
1.29K Comments
Modlog