A Certificate Name That Runs as Root: Five Bugs in Sophos Firewall, Found with Codex

A firewall appliance is one of those boxes where the job description and the threat model are the same sentence. It sits at the edge of the network, it terminates the VPN, it holds the credentials for