GoSign Desktop RCE flaws affecting users in Italy
Mood
thoughtful
Sentiment
negative
Category
tech
Key topics
security
vulnerability
electronic signatures
GoSign Desktop, a client used for qualified electronic signatures in Italy, has been found to have RCE vulnerabilities due to disabled TLS certificate verification and an unsigned update manifest, raising concerns about the security of the application.
Snapshot generated from the HN discussion
Discussion Activity
Active discussionFirst comment
-134173s
Peak period
12
Hour 2
Avg / period
3.1
Based on 25 loaded comments
Key moments
- 01Story posted
11/18/2025, 12:36:54 PM
9h ago
Step 01 - 02First comment
11/16/2025, 11:20:41 PM
-134173s after posting
Step 02 - 03Peak activity
12 comments in Hour 2
Hottest window of the conversation
Step 03 - 04Latest activity
11/18/2025, 8:06:10 PM
1h ago
Step 04
Generating AI Summary...
Analyzing up to 500 comments to identify key contributors and discussion patterns
Internet responds by retreating to behind a single cloud provider who can mysteriously keep ai at bay... Same provider network is probably responsible for the near instantaneous distribution of AI traffic to begin with.
Internet's last bastion of hope is attacked, rather quickly, and half of the internet is scrambling to remember how to administer DNS (The other half never knew).
1) They were willing to sell DDoS protection to DDoS services
2) This decision was made specifically because the existence of DDoS services increased the value of their product
This was always a weird claim, because the first part is 100% true -- while the second part was always unfounded speculation. The conclusion is thus most likely false. They just didn't want to incorporate that sort of thing into their ToS for various understandable reasons.
But Cloudflare has the best marketing of all of them ¯\_(ツ)_/¯
store.steampowered.com. 30 IN A 184.31.101.220
NetRange: 184.24.0.0 - 184.31.255.255
CIDR: 184.24.0.0/13
NetName: AKAMAIGoing to Akamai's site I don't see a single mention of pricing, I don't want to be smooched by some enterprise salesman to get my pricing options.
Going to Fastly's site I see egress costs that makes me think I could probably be better of just staying on AWS,Azure or smth and have a single bill to care about. (That have their own expensive options).
There's probably other small players with sane options pricing wise, but when it comes to managing DDoS issues people want someone big to handle the bulk.
Want the full context?
Jump to the original sources
Read the primary article or dive into the live Hacker News thread when you're ready.