Let the hive mind of Engadget get that for you.
"As someone who doesn't reside in the USA, I was wondering what would be the best way to get internet for my computer in the US for a couple of weeks? If it were Europe I know I'd look for some prepaid data. Is there anything similar offered by American carriers? A MiFi or a data SIM that I can tether from would work, but I'm trying to maintain a tight budget. Help!"
"the group managed to create a rogue Certification Authority (CA) which allows them to create their own SSL certificates"
Huh? It takes virtually no effort to create your own CA and even less to create your own SSL cert - did you mean to say that they recreated one of the valid standard CA's with their own info and then generated ssl certs from that?
Just my thought. The whole article didn't seem very impressive, neither necessitating 400 PlayStation 3. :P
According to the "Read" link:
Our attack scenario basically is as follows. We request a legitimate website certificate from a commercial Certification Authority trusted by all common browsers. Since the request is legitimate, the CA signs our certificate and returns it to us. We have picked a CA that uses the MD5 hash function to generate the signature of the certificate, which is important because our certificate request has been crafted to result in an MD5 collision with a second certificate. This second certificate is not a website certificate, but an intermediary CA certificate that can be used to sign arbitrary other website certificates we want to issue. Since the MD5 hashes of both the legitimate and the rogue certificates are the same, the digital signature obtained from the commercial CA can simply be copied into our rogue CA certificate and it will remain valid.
So basically, they got a regular website certificate. But by using the PS3s they created a certificate that can sign other certificates (the regular certificate is not allowed to do this!), and because the created certificate and the regular certificate have the same hash it is accepted. They need the PS3s to calculate a certificate that would have the same MD5 hash.