Hacker News: psvzhttps://news.ycombinator.com/user?id=psvzHacker News RSShttps://hnrss.org/hnrss v2.1.1Mon, 13 Jul 2026 05:36:50 +0000<![CDATA[New comment by psvz in "Encrypted traffic interception on Hetzner and Linode targeting Jabber service"]]>let's encrypt is a public non-profit, who would definitely assist in finding out how domain control verification (DCV) happened - somehow that obvious line of pursuit was missing from the investigation. The mystery of the MAC 90:de:01:49:76:ae is interesting though, but CIA-custom-Made NIC might be a bit superfluous as an idea. Linode (acquired by Akamai) might use something in-house designed and OEM-manufactured, so I wouldn't treat it as strong evidence. Talk to Let's Encrypt - that will likely unveil what happened.

Interestingly, search "90:de:01" in this page: https://www.cyberciti.biz/faq/howto-linux-configuring-defaul...

^^ looks like another victim VM of the alleged mysterious interceptor :-)

]]>Sat, 21 Oct 2023 14:58:47 +0000https://news.ycombinator.com/item?id=37967329psvzhttps://news.ycombinator.com/item?id=37967329https://news.ycombinator.com/item?id=37967329