MITMing a room full of security people @ Hack.lu

Sunday

Just a quickie: MITMing a room full of security people ;-)

The screenshot

The analysis

Didier Stevens said...: I was in that room at the moment the attack took place.

What did I do? Well, I realized this certificate warning was the result of some attack by a person/group at hack.lu. Since I was using my N800 and I was using a throw-away Gmail account I had created for the CTF (with a password totally different from my password-schemes), I decided the risk was really low for me. So I started to inspect the certificate, but the Opera browser on my N800 didn't manage to display the certificate (probably because of the certificate tampering). And then I accepted the certificate for the current session, because I'm inquisitive and like to investigate. But it didn't work for me, my browser didn't display the gmail inbox.; October 21, 2007 10:59 PM