It is #tax season in the #US. Lots of people use tax software
Some people use #HRblock software to prepare. You may reconsider.
HR Block Business 2025 installs, when you install their software for your tax 2025, a root CA (certificate authority). For whatever strange reason. This is ugly, because it bears lots of risks what they can now do while you are surfing. But this is not enough. The validity of this certificate is set til 2049. You need the sw now, not 2049. But wait, there is more.
They include their private key for the CA in a dll.
This led a security researcher to create a website to create his own self signed certificate, validated with the root CA private key of HR Block.
Check here: https://hrbackdoor.yifanlu.com
https://news.ycombinator.com/item?id=47457162
#itsecurity #privacy #securitynow (thanks)
TaxCut 2007
https://macintoshgarden.org/apps/taxcut-2007
Software to prepare both your federal and state tax returns.
Screw #TurboTax, you need to hire a real human accountant. #SFGATE columnist Drew Magary explains why you should absolutely not do your own taxes.
#tax #HRBlock #DrewMagary
https://www.sfgate.com/politics/article/turbotax-human-accountant-21324583.php