Links/notes relating to the diginotar attack where certs for domains such as *.google.com, *.facebook.com, cia.gov, *.yahoo.com amongst many others were stolen.

https://blog.torproject.org/blog/diginotar-damage-disclosure

Below is a list of the stolen certs.

https://blog.torproject.org/files/rogue-certs-2011-09-04.csv

Amongst them are a number that are NOT valid domains which are being talked about as calling cards from the hackers. Written in Farsi they are hard to translate directly, but in the comments from the first link they are described as [By ioerror himself via an anonamous Farsi speaker]:

“RamzShekaneBozorg” is “great cracker”
“Hameyeh Ramzaro Mishkanam” translates to “I will crack all encryption”
“Sare Toro Ham Mishkanam” translates to “i hate/break your head”

and then in the comments by another anon as:

Sahebeh Donya => Possessor of the World e.g. God.
Sarbazeh Gomnam => Unknown Soldier
Elme Bikaran => Science/Knowledge of the idle/unemployed
Daneshmande Bi nazir => Peerless Scientist
RamzShekaneBozorg => Great Cryptanalyst
Toro Ham Mishkanam => I will breakTOR too
Hameye Ramzaro Mishkanam => Will break all cyphers

https://blog.torproject.org/files/rogue-certs-2011-09-04.csv

http://pastebin.com/qrbH3ezi

Possible ‘i dun it’ paste from the hacker/culprit known as ComodoHacker. Unproven, but shows a large amount of knowledge on the subject.

http://pastebin.com/1AxH30em

[update] A few more posts have appeared on his/her account on pastebin. He is also responsible for the Comodo CA hack [detailed here https://blog.torproject.org/blog/detecting-certificate-authority-compromises-and-web-browser-collusion] so its more likely that he was the hacker of DN. Hes posted a PoC im looking over atm.

This is quite a scary situation, and really should be dumbed down and presented to the less tech savy to convey that sites such as google and facebook [even govt sites like the cia] ARE susceptible to attack – even if its not the companies fault [in this case it was DigiNotars].