Shocking! 360, known for its focus on security, actually handed over its "trump card" to the whole world? Recently, the entire internet has been buzzing about 360's newly launched AI agent, "360 Security Lobster." The most surprising thing isn't the product itself, but the fact that they actually packed the SSL private key and wildcard certificate for *.myclaw.(360.cn) directly into the publicly downloadable client. ‍♂️ What does this mean? In Crypto terms, this is equivalent to posting the private key to your vault on Twitter for everyone to see. With this private key, theoretically anyone could: 1️⃣ Perfectly impersonate the official server 2️⃣ Easily carry out man-in-the-middle attacks (MITM) 3️⃣ Hijack traffic and forge webpages And this is a wildcard certificate valid until 2027! The official response so far is that it was a "release process error," and the certificate has been revoked.