Tell HN: H&R Block tax software installs a TLS backdoor
138 points by yifanlu
by giantg2
0 subcomment
I'm wondering if download source matters. Seems like most are downloaded straight from their site, but curious if they still offer CDs or if sellers like Amazon have the direct installer downloads.
I have the non-business edition installed and still get a privacy error attempting to load your page, so this seems specific to the business edition. Thanks for the heads up.
by altairprime
0 subcomment
Curious: is it carrying a SHA-1 self-signature?
by musicale
0 subcomment
Welcome to CrapOS 26H1! We think you'll love it. Also, if you install tax software it might enable anyone to read all of your "encrypted" TLS connections regardless of what browser or app you might be using.
Click "I AGREE" to accept this as part of our mandatory user abuse and subjugation agreement.
by GoldenMonkey
1 subcomments
Aren't mac's more secure by default. Receive the warning using mac with h&r block 2025 installed.
Hacker News