Hacker news

  • Top
  • New
  • Past
  • Ask
  • Show
  • Jobs

Tell HN: H&R Block tax software installs a TLS backdoor

85 points by yifanlu about 21 hours ago | 6 comments | View on ycombinator

WarOnPrivacy about 9 hours ago | 

    "If you have an SSL error in your H&R Block Software, 
    here’s what you need to know."
https://www.hrblock.com/tax-center/support/software/technica...

TheClassic about 10 hours ago |

I have the non-business edition installed and still get a privacy error attempting to load your page, so this seems specific to the business edition. Thanks for the heads up.

altairprime about 18 hours ago |

Curious: is it carrying a SHA-1 self-signature?

raw_anon_1111 about 19 hours ago |

When will these companies learn?

https://michael.team/zoom/

musicale about 8 hours ago |

Welcome to CrapOS 26H1! We think you'll love it. Also, if you install tax software it might enable anyone to read all of your "encrypted" TLS connections regardless of what browser or app you might be using.

Click "I AGREE" to accept this as part of our mandatory user abuse and subjugation agreement.

undefined about 13 hours ago |

undefined

sloaken about 20 hours ago |

Thanks for the warning.

cochinescu about 15 hours ago |

[dead]