So you're going about your day possibly doing some retail on them interwebs feeling pretty good about the little padlock in the corner of your browser. Many websites tout that they're hacker-proof which, if you know even a little about the internet, you'll know it's just a marketing scheme. Well, so much for the average Joe's first line of defense. According to an article at Gizmodo, a company named Packet Forensics is secretly marketing a device to law enforcement that does a "man in the middle" magic trick and makes your ssl about as effective as a door lock in the shady parts of Detroit. It's all a matter of obtaining a copy or a faked certificate from the issuer and, in reading, that doesn't seem all so difficult. So, I guess until the EFF can come up with something better we better get out the tin foil hats and send out carrier pigeons.
Wednesday, March 24, 2010
That Padlock Don't Mean Jack...
So you're going about your day possibly doing some retail on them interwebs feeling pretty good about the little padlock in the corner of your browser. Many websites tout that they're hacker-proof which, if you know even a little about the internet, you'll know it's just a marketing scheme. Well, so much for the average Joe's first line of defense. According to an article at Gizmodo, a company named Packet Forensics is secretly marketing a device to law enforcement that does a "man in the middle" magic trick and makes your ssl about as effective as a door lock in the shady parts of Detroit. It's all a matter of obtaining a copy or a faked certificate from the issuer and, in reading, that doesn't seem all so difficult. So, I guess until the EFF can come up with something better we better get out the tin foil hats and send out carrier pigeons.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment