Session hijacking is not a new vulnerability and it is surely not a problem that only the gmail users face. All websites that use sessions to identify users between requests are vulnerable to this. The news here is that now script kiddies have access to a tool to do this.
Secondly, the website claims that gmail uses this functionality for low bandwidth users. That may be true. But more than that, SSL handshake is a lot more computationally expensive for the server than it is for the client because server has to perform the asymmetric decryption (of the random number generated by the client encrypted by server's public key).
A HTTPS server is supposedly 9 times slower than a HTTP server. So, there is another reason why servers avoid SSL by default.
"Marketing researcher Gartner suggests a widespread attack could surface by the end of next year." - Slashdot
"According to the authors, a fast-spreading phone virus or worm is *unlikely* to appear before the end of 2007." - Article referred.
Besides, these people don't have much use in society or a future, especially in India's caste society. This is an excellent opportunity for them to contribute something to better mankind and benefit the rest of us.
Some people will be angry with this, but if not them, then who's going to do this?
Hmmm..let's see. Hope you lose your house, your job, all your money. Then I'll pay you pennies to be a human guinea pig. And by your understanding, you'll be happy to take the job and consider that as your contribution to the society?
Poor (no matter where they are from/what color their skin is) who become human guinea pig, are forced into this because of the financial disparity. They don't see this as their "use to the society". And worse still, it hurts me if the rest think of it as their "use to the society". I rather feel ashamed of our incapabity to help them in the first place.
And another thing, by your philosophy, "worth of life/health" == bank balance. Hey, Bill Gates wants to buy your kidneys. A billion dollars should be more than your life's worth. Your family for one should be happy to sell you.
Don't you see that your philosophy justifies buying/selling of human organs, prostitution etc in one go.
Actually, you missed another opportunity. So many people in south asia lost their home/belongings during the tsunami. You should have paid them their life's worth and used them for experiments.
Slashdot Mirror
Session hijacking is not a new vulnerability and it is surely not a problem that only the gmail users face. All websites that use sessions to identify users between requests are vulnerable to this. The news here is that now script kiddies have access to a tool to do this. Secondly, the website claims that gmail uses this functionality for low bandwidth users. That may be true. But more than that, SSL handshake is a lot more computationally expensive for the server than it is for the client because server has to perform the asymmetric decryption (of the random number generated by the client encrypted by server's public key). A HTTPS server is supposedly 9 times slower than a HTTP server. So, there is another reason why servers avoid SSL by default.
"Marketing researcher Gartner suggests a widespread attack could surface by the end of next year." - Slashdot "According to the authors, a fast-spreading phone virus or worm is *unlikely* to appear before the end of 2007." - Article referred.
Besides, these people don't have much use in society or a future, especially in India's caste society. This is an excellent opportunity for them to contribute something to better mankind and benefit the rest of us.
Some people will be angry with this, but if not them, then who's going to do this?
Hmmm..let's see. Hope you lose your house, your job, all your money. Then I'll pay you pennies to be a human guinea pig. And by your understanding, you'll be happy to take the job and consider that as your contribution to the society?
Poor (no matter where they are from/what color their skin is) who become human guinea pig, are forced into this because of the financial disparity. They don't see this as their "use to the society". And worse still, it hurts me if the rest think of it as their "use to the society". I rather feel ashamed of our incapabity to help them in the first place.
And another thing, by your philosophy, "worth of life/health" == bank balance.
Hey, Bill Gates wants to buy your kidneys. A billion dollars should be more than your life's worth. Your family for one should be happy to sell you.
Don't you see that your philosophy justifies buying/selling of human organs, prostitution etc in one go.
Actually, you missed another opportunity. So many people in south asia lost their home/belongings during the tsunami. You should have paid them their life's worth and used them for experiments.