[3683] in Privacy_Forum
[ PRIVACY Forum ] Nokia accused of Man in the Middle attacks on
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Wed Jan 9 15:36:45 2013
Date: Wed, 9 Jan 2013 12:11:24 -0800
To: privacy-list@vortex.com
Message-ID: <20130109201124.GB13001@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Nokia accused of Man in the Middle attacks on unencrypted and
encrypted Internet traffic
http://j.mp/13hzYdj (gaurangkp)
"When checked trusted certificates in phone it is found that Nokia has
pre-configured the phone by trusting at least one of these
certificates, which is the reason why there are no security alerts
being shown during this Man In The Middle (MITM) attack by Nokia. The
snapshot given below shows details about each of the three
certificates that are shown in packet capture."
- - -
Yet another symptom that the existing PKI is fundamentally flawed.
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
- Data Wisdom Explorers League: http://www.dwel.org
- Global Coalition for Transparent Internet Performance: http://www.gctip.org
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren / Twitter: http://vortex.com/t-lauren
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
