[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-xray-core-hid-a-certificate-verification-bypass-flaw":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},10137,"xray-core-hid-a-certificate-verification-bypass-flaw","Xray-core hid a certificate verification bypass flaw","A certificate verification bypass in Xray-core was reportedly concealed rather than disclosed, according to a report on a network freedom forum.","A security report says Xray-core shipped a bug that let connections skip proper TLS certificate checks - and that the problem was kept quiet instead of fixed in the open.\n\nThe claim surfaced in a GitHub issue filed on net4people\u002Fbbs, a forum that tracks tools people use to get around internet censorship. According to the report, Xray-core - a widely used fork of the V2Ray proxy framework - contained a flaw that allowed certificate verification to be bypassed, undermining the TLS encryption that is supposed to protect users from interception. The issue frames this as concealment rather than a disclosed-and-patched bug. The discussion reached Hacker News, where it picked up 67 points and nine comments, modest but notable traction for a niche networking report.\n\nXray-core underpins proxy setups that activists, journalists, and ordinary users in restrictive countries depend on to reach the open internet. A certificate bypass is not a cosmetic bug - it is the exact failure mode that lets a network operator, or anyone positioned to intercept traffic, impersonate a server and read what is supposed to be encrypted. If the flaw was concealed rather than disclosed, that adds a trust problem on top of a technical one, for software whose entire value proposition is holding up under adversarial conditions.\n\nCircumvention tools live and die on that trust; a hidden crypto bug is exactly the kind of thing that sends users looking for the next fork.","[\"xray-core\",\"censorship-circumvention\",\"certificate-verification\",\"security\"]","2026-10-04T17:38:54.000Z","2026-10-06T01:03:53.933Z","2026-10-06T01:04:00.724Z","published",null,[],"security",[26,27,28,24],"xray-core","censorship-circumvention","certificate-verification",[30],{"name":31,"url":32},"Hacker News","https:\u002F\u002Fgithub.com\u002Fnet4people\u002Fbbs\u002Fissues\u002F672",0,{"sections":35},[36,41,45,50,55,60,64,69,74,79,84,89,94,99],{"name":37,"slug":38,"count":39,"latest_published_at":40},"AI","ai",6317,"2026-10-05T09:51:57.000Z",{"name":42,"slug":24,"count":43,"latest_published_at":44},"Security",871,"2026-10-05T04:00:00.000Z",{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",446,"2026-10-05T10:25:00.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",340,"2026-10-05T09:18:03.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",205,"2026-10-05T10:58:22.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":44},"Science","science",179,{"name":65,"slug":66,"count":67,"latest_published_at":68},"Consumer Tech","consumer-tech",160,"2026-10-05T10:23:15.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Dev Tools","dev-tools",99,"2026-10-05T10:47:06.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Software","software",97,"2026-10-04T10:00:00.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Startups","startups",93,"2026-10-05T11:13:51.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Gaming","gaming",53,"2026-10-02T02:50:39.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"General","general",51,"2026-10-05T02:35:01.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",32,"2026-10-02T18:00:00.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]