V.T. Eric Layton Posted December 9, 2014 Share Posted December 9, 2014 (edited) I received a MS Security Update email today using an expired signature. I wonder how long it's going to take MS to figure this out. -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGP Command Line v10.1.0 (Build 52) (Win32) mQINBFON/PYBEAC4ndGIlXAUB/U2vwRNnPG9mherO79+D5NYc25w4qIPspT8Mpi1 ZOwi0OvgtXrtVSbzHboy4d+4vP8Kv3GZCBJ6zpzNSpNeCi6DqyJEgSQfHhVuDvRB zHFljrWpBvLPJvZm/0yPLbve6CFxqGK0TQCmgJKkm+X1SdTjHSU6zV4IzLX8XidN OBWlx1kVQPuDXFT/XNlu7l7mnkqu1/hSxCGGTqGieOK5lDQwK+6lSsVaL5iTKfof HrzwokXRrxanjHE7G3pmBEKZi8dgjV+gzs/3qyn36OMzkLBV52QhDOUALLH/cIGA Tn37cX6uGja9Lp+6FGO1u+DsAlh/n8MUQoXvYqbTWJY8bnlURSgTAOY4RxfrAm7N TIyhWhjPCtAMNoiD4Uz7Yyw3NTPLUpOJeYlA52kw1ttOhr50k4uy9X1nHLYD6WNN LS/w+6vpPWs5nmazNPlVpeMWPWp4WvJyPrIz9204Eb1SMxzbKkzyOHmEkXnsx8tN OCx42DdUvTtbfVOcSIVq8rqFElNuYacg5ZKSJW8FZCpjRvzfeDxkxgkF8j6oHPid JSYANKJuWQ1UJwjpCxXlR30QIoMyAAI57ypynG/QCfo56JSMMPHjums7eK/rsrzu k+uv2VMt+hNgJ9q463d2zakgVV8HBwwfSVYLEZiLX/9DyjXBBc7lP4+lkwARAQAB tExNaWNyb3NvZnQgU2VjdXJpdHkgTm90aWZpY2F0aW9uczxzZWN1cml0eW5vdGlm aWNhdGlvbnNAZS1tYWlsLm1pY3Jvc29mdC5jb20+iQJsBBABAgBWBQJTjfz2BQkA 7U4AMBSAAAAAACAAB3ByZWZlcnJlZC1lbWFpbC1lbmNvZGluZ0BwZ3AuY29tcGdw bWltZQULBwgJAgIZAQUbAwAAAAUeAQAAAAMVCAoACgkQkyFLMKkpZfINKA//RbWF BKECrieer3M8ZuKNwpV7t3a0QYs2bYiSAcYqsN3AEsGJnBtRslQkn4OOyLFWdhoV jwkEf2thIeBESuSVe1XPLOGOxAfPdrzlB4rgqA/MYWvam3J/e2eU/mJ3cQ0KRq5u iIjoDp26ul+ZXmoKsm2TZzAI8cpN3CelY+3Wmcflc/93VSKylBnfarBwMfJxrEqW mDi3Rp7gcTj4VKDcnssCH2Sq9vl1+A38vtClCgJCkhHny+zRUtFuNc+Hw3w7ljMo vt57OLDFrRbJHUNoGuw4CvPZaUKNvuXyTaL84AVFTWL8yRvhIbSD5tASP4anlzfO EAc0DzNBpAo9K1cHG4IYTexB5tdtiRzji4QdlhQKWfCV7Pht4hpPh8rv2Ua6iMEl +bPwUjCstVR0NLMadhR7XJ3JKwXFplP1UVMTIjhsQmRvTV3EY3ulCu3buE9EshyB k+1vuxRxtUo2GielYzWxvRGXQE+2tO+ZwnmMRqczh7xuLcrt2g+1b2sRoYp0H3VG NpL2WQJ4GX6f67Ml/ZNrdDc84afSt2hfyhieZ7+2LnQ934jpIa9DZ3thJpfPGvXd wOjiBFxtJZx/5CTUCagmXqn9H6MuCvGAEorW+3novxYvu8XF/lV3EAO2PTkxQOvh 3ToTYUzFiviiP++iapHr5icZJHmPehneYv/DENK5Ag0EU438+AEQAKr3doH8132O M6PRuwzHLx6hIiDkUsJhj6Q1bJNsN4EaQ2rAzo7J4IT0xrIYHFzyKqPPSez5YPSm gi+bYRy5AutAJUJoFhV4kNcSQ1psNC0T5RS42PnypW0AMfmZ/rS4KrXz+WMsiPOq TDJYoOukw6dLgqCxwQDKOvwtQ3sJjkh3f1qTKVSH1dBT1qKCPu8b0QIs3jHNEJKI 8DRlxBcc22lIt/xXCcqh9i4eS9tOk+C08FQNQ1+Hogkn5gmxBDAhCGofm+xbiAM8 ZvKsrgF6tMrXNlISYF2eQGzkgLcj2w4JTGrjX2QVo4TfSBdUFtuQbLNRJ9KWPRj5 2JQi3c1UJfwUoaRltsBiEpgxJKMwxISlFJGjZONRrpfAifA2bwSnIMrNEkAWXZhz yrgGnOWOtotlUmEAEjY8hIWoQj5hcSRiKcJjNDA5uR4KsNGwHPv+b9zEmFxoPK9Z G2MT7lg2XwSUHp0pX5TTl4bzn+dmuwhmDxkwWJjVVfMEwyAMJSErSUPK5Kys3sB4 iHLLbRJZtg/0+a8QeumeVwbEDtDREVBkWA0nCw5g2HGKiMWyluKutWZ9dk6IFVcy 51CPHR8kVkolp50smV29gwAgL50juD0W8Oc9z1JgftllqMIQtIbp4O3ht4gYsBB0 farbrdr2MauuPCNIkDbM15GoIY7XbY3dABEBAAGJBEcEGAECAjEFAlON/PkFCQDt TgAFGwwAAADBXSAEGQEIAAYFAlON/PgACgkQUsl6EUT0QUpt2w/+Lbo8c5DGD/4a 9b+B/kfPXyzYanJlxDz3TjRvRZNz/N7nopUYFZMThbqk2ZukDnU+XYh17fklEIQH sI1WkbN8b//wPdgsqLoeY9aYvw/UCVRMBWc+QQA16sGn6sD1zYzJg7z+3vDmehyV JnC5ZH3B061y8W4OgNHWOIbfs9kh+IE58nUWT9+V5MPPHuqKkQWPHp+QA4WQLU8O 74nfSukuaJQQdZOKXvgm5GxQndwtWLy+lFmYfTwWtjTaH8tgp6B70UhWahwgtEQQ I7J8hP3V4fZPU02tqZ7fJnmF0+PmYxC4JTEsN7jeXqv/zgweymLAUPqAcLoKDaOB iiuzR18l0QNIpPfwPBfIno6yBVUyoFwcdiM8JL/ZakbD+nhZ27Jyp6U+gm+7rRm7 rqdqUDEpbOz35e2iNQKmeBCpdF5PWq5hPUDkIUmQkERYRSUWROFRmOTuzgA/S9On YUNMs1Z9Xin1lZkHLh8vTh0IvTBZH3vFl46usl4hbySdlwf7dw46ZLHvLSfbnlTP Cu8i6Yc1yXoBWgROlHdAEnc3WQ8cg72Z+zyut6Wg0Bb+OnxhnSsXogyO2nb9pPHo QAph8ZbkNizJ4HKxpqfeXY4F1DFNpPm/kPpOF7gY3eSjK81XXSKRctwrPLN2Fp2Z 4Um8skN42bnyQ49poHtyrd5yu8ow2dsACgkQkyFLMKkpZfLsiRAAnDf1Iax4bBB8 Bf/PLT/wgzJWSzTH/veJ/Dt5GDMcCSkP4B9d/DniueDpbAar8ih108uzPanY3wjO 9WYxJEfYo5seaQrGgWA90PGAR8U1+2/fS7grkprDWSA2BF6nwEKjW1EImCAEzOU+ FZEXXfEBHzAo+j8BFR2ZTRQQnsf5/dnkV+4QvPSU093DEKR4jiU+MXHKklhhrkB6 A3I2mGJofJko3RQahvmqv9CRDBq4tuT1rUKza0FwM/kFmIbz6dyuaApIeO020vMB WyYEKeBBQRhwdZSgdKNS2JXtWkvLHGzz8EEMumH0AhmZL3tQxNLL/T9v2JF7eYLd cb3oEhyTG2X8XyuSfs5R90Ywixq/URdGVlBNET3EeR6HxvL6K8i91QzEPWN0VmzH Z66aVW3uEmd4L5tx0vRaC/Gz1xEbAD7ZKpxqzsEUE0vhTGaH4zJcO1okmPKiHjec P+F5bgspbGSjnxqUH/ouoAm9WHwoRG0xt/PM1fp6BGt24cbvVMpG5ICAFY4oubOm j0Ae3iwAASe69R5F0Jg6vdLjnuBlGAx4oUh93T3q9w0VC55wwkL6b4OWYByy4uH5 jTM/62zmVSAYwFUqKxAAZh8qFSOilffSLpGvssBJV4jZWzOS6LvSF2KvIS8HHLB5 pgJxRnCn5Mj7nM3qOPdOb6e4yj33Zpc= =2CIV -----END PGP PUBLIC KEY BLOCK----- Expired 30 November 2014 Edited December 9, 2014 by V.T. Eric Layton 2 Quote Link to comment Share on other sites More sharing options...
Corrine Posted December 9, 2014 Share Posted December 9, 2014 Are you referring to the Microsoft Security Advisory Notification from securitynotifications@e-mail.microsoft.com? There was no indication of an expired signature in the email I received. Quote Link to comment Share on other sites More sharing options...
V.T. Eric Layton Posted December 9, 2014 Author Share Posted December 9, 2014 Yes. That's the one. The public key they're using (see above) is expired. It even shows it as being expired on their own site --> http://technet.microsoft.com/en-us/security/dn753714 Quote Link to comment Share on other sites More sharing options...
V.T. Eric Layton Posted December 9, 2014 Author Share Posted December 9, 2014 Are you referring to the Microsoft Security Advisory Notification from securitynotifications@e-mail.microsoft.com? There was no indication of an expired signature in the email I received. Also, Corrine... unless you have encryption enabled on your email client, you would not have received a warning, as webmail and encryption-disabled email clients would not even concern themselves with the pgp block of the email in question. 2 Quote Link to comment Share on other sites More sharing options...
V.T. Eric Layton Posted December 11, 2014 Author Share Posted December 11, 2014 I got another one from them today with the expired key. I emailed MS TechNet Support and FWD'd the email with the expired public key. We'll see if I get any reply. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.