[145244] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Facebook insecure by design

daemon@ATHENA.MIT.EDU (Michael Thomas)
Sun Oct 2 11:40:56 2011

Date: Sun, 02 Oct 2011 08:38:36 -0700
From: Michael Thomas <mike@mtcc.com>
To: William Allen Simpson <william.allen.simpson@gmail.com>
In-Reply-To: <4E85865F.60700@gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

William Allen Simpson wrote:
> In accord with the recent thread, "facebook spying on us?"
> 
> We should also worry about other spying on us.  Without
> some sort of rudimentary security, all that personally
> identifiable information is exposed on our ISP networks,
> over WiFi, etc.
> 
> Facebook claims to be able to run over TLS connections.
> Not so much (see attached picture).
> 
> This wasn't an "app", this is the simple default content of a
> page accessed after a Google search.
> 

I'm not sure why lack of TLS is considered to be problem with Facebook.
The man in the middle is the other side of the connection, tls or otherwise.

Mike


home help back first fref pref prev next nref lref last post