Friday

Public Wifi at Blackhat and how to defend yourself

Public Wi-Fi even more insecure than previously thought (Register.co.uk)

Users of Yahoo! Mail, MySpace and just about every Web 2.0 service take note: If you access those services using public Wi-Fi, Rob Graham can probably gain unlimited access to your account - even if you logged in using the secure sockets layer protocol.

Graham, who is CEO at Errata Security, demonstrated the hack to attendees of the Black Hat security conference in Las Vegas. The technique uses a plain-vanilla network sniffer to read the cookies returned by Google Mail, Hotmail and scores of other sites after a user has entered login credentials.

Well, how to defend yourself (if you are at a hacker convention)? Read their Defcon Survival Guide or the Digital SelfDefense of Didier Stevens.

0 comments: