Unterhaltung

Nachrichten

1. mcscx mlinksva

   ^"Lenovo installs a #MITM cert & #proxy called Superfish, on new laptops, so it can inject ads? Someone tell me that's not the world I'm in"

   Thursday, 19-Feb-15 09:31:26 UTC von quitter.se
   • lnxw48 wiederholte dies.
   • der mlinksva

     @mcscx @mlinksva "It helps you to find products you have diffculties to find with text based search."

     Thursday, 19-Feb-15 09:34:39 UTC
   • der mlinksva

     @mcscx @mlinksva Google has two patents for similar systems

     Thursday, 19-Feb-15 09:36:34 UTC
   • mk der

     @der I never have difficulties finding products using text-based search

     Thursday, 19-Feb-15 09:41:54 UTC
   • Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca Surveillance , Computer and Network Security , der

     MITM cert software is all too common. There's a whole ecosystem of vendors selling MITM "solutions" to corporations. And since nobody ever checks the cert details when they're browsing with https, nobody realizes they've been compromised. Never…

     Thursday, 19-Feb-15 12:56:10 UTC
   • lnxw48

     @mcscx #WTF. That's both evil and stupid.

     Thursday, 19-Feb-15 17:32:44 UTC
   • lnxw48 Computer and Network Security , Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca , der

     @der @bobjonkman Not just your employer's computer. I used to get catalogs of MITM appliances sent to me at work. The vendors were targeting chains of #coffee shops and eateries that offered #WiFi access. I suspect you're being MITM'd every time you use Internet at a hotel, too.

     Thursday, 19-Feb-15 17:42:36 UTC
   • mcscx Microsoft Windows group , Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca

     @bobjonkman !Microsoft's #ForeFront firewall thing also intercepts https traffic. #MITM

     Thursday, 19-Feb-15 19:00:46 UTC
   • nawi

     @mcscx Is that a Windows only thing ? Or something like the stored Windows keys in the UEFI ?

     Thursday, 19-Feb-15 19:18:27 UTC
   • mcscx nawi

     @nawi I think Superfish is just a pre-installed piece of software in Lenovo's Windows installation + certs for interneteplorer [noexpert}

     Thursday, 19-Feb-15 19:58:16 UTC
   • rozzin Computer and Network Security , Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca

     I've heard corporate IT types say "the fundamental underlying problem" with #endtoend !security is that it's secure end-to-end: http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_12-3/123_security.html

     Saturday, 21-Feb-15 22:40:02 UTC