alt.hn

3/20/2026 at 4:45:28 PM

Tell HN: H&R Block tax software installs a TLS backdoor

by yifanlu

3/22/2026 at 2:44:54 PM

I'm wondering if download source matters. Seems like most are downloaded straight from their site, but curious if they still offer CDs or if sellers like Amazon have the direct installer downloads.

by giantg2

3/21/2026 at 3:31:24 AM

I have the non-business edition installed and still get a privacy error attempting to load your page, so this seems specific to the business edition. Thanks for the heads up.

by TheClassic

3/21/2026 at 4:58:35 AM

Welcome to CrapOS 26H1! We think you'll love it. Also, if you install tax software it might enable anyone to read all of your "encrypted" TLS connections regardless of what browser or app you might be using.

Click "I AGREE" to accept this as part of our mandatory user abuse and subjugation agreement.

by musicale

3/21/2026 at 9:55:46 PM

Aren't mac's more secure by default. Receive the warning using mac with h&r block 2025 installed.

by GoldenMonkey

3/21/2026 at 11:27:13 PM

These stupid tax software companies' business editions seem to support only MS-Windows. No idea why, they already support macOS on other editions.

Anyone know of any business editions available on macOS?

by snarkanon

3/22/2026 at 12:18:00 AM

> No idea why

Probably because business users on macs are a rounding error, no offense.

by majorchord

3/20/2026 at 7:40:56 PM

Curious: is it carrying a SHA-1 self-signature?

by altairprime

3/20/2026 at 5:45:23 PM

Thanks for the warning.

by sloaken

3/20/2026 at 10:28:54 PM

[dead]

by cochinescu