Cisco: Magic WebEx URL Allows Arbitrary Remote Command Execution

Re:Cisco: Magic WebEx URL Allows Arbitrary Remote Command Ex... by emmelaich on Tuesday January 24, 2017 @04:26AM (#13469929)

But the client (Cisco software) does the encryption does it not? Therefore it has access to the unencrypted data, therefore can do what it likes with it.

So my comment (weak as it is) stands.

[ Parent | on HN ]

Re:Cisco: Magic WebEx URL Allows Arbitrary Remote Command Ex... by damnfinecoffee on Wednesday January 25, 2017 @12:47PM (#13483786)

I mean I suppose that's true but that's a terribly weak argument. You could say the same thing about Signal which is considered one of the most secure messaging applications on the market at the moment. It's pretty trivial to monitor network traffic to see that the unencrypted data never leaves your own device

[ Parent | on HN ]