obby (aka libobby) does not verify SSL server certificates, which allows remote malicious users to spoof servers via an arbitrary certificate.
ubuntu developers obby -