Slashdot Mirror

← Back to Stories (view on slashdot.org)

Why One-time Passwords Suck For MITM Attacks

Posted by CmdrTaco on from the my-password-is-pass1234 dept.

whitehartstag writes "Black Hat 08 disclosed several SSL VPN and DNS vulnerabilities that caused several people to sit up and take notice. Some of these new exploits performed a brilliant Man-In-The-Middle attack on SSL VPN tunnels. This article walks you through how using certificates, instead of OTP tokens, for second-factor authentication can increase the security of your SSL VPN against these new types of attacks."

2 of 138 comments (clear)

  1. mo3 d0wn by Anonymous Coward · · Score: -1, Offtopic

    move any 3quipment similarly grisly

  2. Re:xkcd comic by Anonymous Coward · · Score: -1, Offtopic

    Well just in case he doesn't know...

    Knowing is half the battle.

    wow. You're a dick.