« DIY green Power | Home | Bionic eyes »

Exploit to take over domains

Not sure how this one works - apparently we are all vulnerable (as in the major web browsers are)  You can find a commentry of it here on boing boing

What makes this more dire than usual is it allows the hacker to spoof the domain AND the SSL.  So now you can be on a web site that looks like the real thing AND has the correct SSL certificate information.

To work it uses IDN support.

What is really stupid, is that the attack method was first written about in 2001 - before any browser had implemented the feature...

Depending on who you beleive, there is, or is not, a solution for Mozilla users...

---

No comments:

---

No trackbacks:

Trackback link:

---

Name:			Remember personal info? Yes No
Email:
URL:
Comment:		/ Textile
this is to stop spam bots causing me pain. the first four letters of frakkle     (Register your username / Log in)
Notify: Yes, send me email when someone replies. Hide email: Yes, hide my email address.
Small print: All html tags except <b> and <i> will be removed from your comment. You can make links by just typing the url or mail-address.