Slashdot Mirror

← Back to Stories (view on slashdot.org)

Black Hat Presentation Highlights SSL Encryption Flaws

Posted by timothy on from the well-hey-nothin's-perfect dept.

nk497 writes "Hackers at the Black Hat conference have shown that SSL encryption isn't as secure as online businesses would like us to think. Independent hacker Moxie Marlinspike showed off several techniques to fool the tech behind the little padlock on your screen. He claimed that by using a real world attack on several secure websites such as PayPal, Gmail, Ticketmaster and Facebook, he garnered 117 email accounts, 16 credit card numbers, seven PayPal logins and 300 other miscellaneous secure logins."

2 of 152 comments (clear)

  1. Black hat, by Anonymous Coward · · Score: -1, Troll

    BLACK DICK.
    Nigger man, nigger man.
    Hee haw, jackin' his jaw,
    Grabbin white wimminz' with greasy paws!

  2. Can you say criminal? by Anonymous Coward · · Score: -1, Troll

    He admits to criminal activities and hasn't been charge ??? WTF?

    It is one thing to examine and find a way around the security, so as to plug the hole...but to actually attack a number of sites and illegally obtain account information, is a crime...he needs to spend some time in jail as a reminder of how to work within the law...oh but wait...this is /. and code monkey criminals are worshiped...