Your Wi-Fi can tell people a lot about you

TalkBack 12 of 12:

« Previous

• Thread View
• Flat View

clues for the clueless

A few comments from a working infosec geek...

First of all, thanks David, Ferret sounds like a nice piece of work!

Also, you made a very good point with the mention of SSL man in the middle, the previous posts about safety from SSL missed a couple of things.

MITM (Man Tn The Middle) is one, another is that SSL only protects data in transit on the network (okay, technically it protects it between the en/decryption points in the protocol stack (I haven't looked at source to determine where and how that's implemented, would assume it's somewhere in the sockets interface) but not before or after the calls to the network transport) but not end to end from the user to the remote app, nor at rest at either end.

Keyloggers look at the data before the part of its lifecycle secured by SSL; MITM breaks the SSL pipe into two secured segments separated by an insecure (compromised) segment.

Thankfully MITM is somewhat challenging technically, but keyloggers are not.

Overconfidence is dangerously prevalent, a little knowledge is a dangerous thing.

Posted by: bruce_mcculley@...   Posted on: 03/06/07 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now