Last two weeks has been challenging to say the least. We faced a new threat vector. It was stressful, it was not pleasant but it was a learning experience for me, for my company and for the security industry in general.

Everyone in Comodo got together and did an amazing job of supporting Comodo and its customers! Our people were working well beyond the call of duty. Some of them didn’t even go home for 48 hours to protect whats valuable to them, Comodo and its customers. Our customers were sending in their wishes of support, our users were telling us to hang in there and they are behind us, it truly was a sign of unity all around!  Our people, customers and users understood that Comodo was a victim of a criminal activity. They understood that what happened was a result of a new threat vector.  There were some that tried to ca$h in …but they were too few to mention and they were ignored.

Many in the industry sent their support to us, many argued on our corner, we are grateful for all those who stood up for what was right.

Amongst all that I lost track of what was happening in Japan who was suffering an unimaginable tragedy. You see there is always someone somewhere who may be suffering more than you do, so be grateful, don’t feel sorry for yourself, always strive for improvement, and always continue helping others!

Thank you again for all your amazing support,  we love you all and will always do our best to be there for you!

Melih

PS: Here is the link for donations for Japanese Earthquake relief.

You will have heard of many attacks (TOR attack , RSA attack  , Tunisian government injecting into login pages) being reported in the media last few days.

What is it?

Its an attack on the “Authentication” layer of the Internet.

Why is it being attacked?

Internet has become a critical medium for information exchange. This information is of value to many entities.

Who is attacking it?

We believe these are “politically motivated”, “state driven/funded” attacks.

Why do we think these are state driven/funded?

Well, one of the origin of the attack that we experienced is from Iran, what is being obtained would enable the perpetrator to intercept web based email/communication and the only way this could be done is if the perpetrator had access to the Country’s DNS infrastructure (and we believe it might be the case here). Of course this is our interpretation of the situation.

First time we are seeing a “state funded” attack against the “Authentication” infrastructure. The Threat Model is changing and Comodo had already initiated a proposal for new standards in 2010 which would help mitigate some of these attacks. We will make sure to double our efforts in getting industry wide acceptance to these much needed standards so that we can continue to defend our security and freedom.

Melih

PS: You can read Phillip Hallam Baker’s blog on the matter here.