LeakyX, a vulnerability that Apple and Microsoft have known about for years

Re:LeakyX, a vulnerability that Apple and Microsoft have kno... by willstrafach on Saturday September 23, 2017 @08:33PM (#15322575)

> Credentials are sent BEFORE prompting the user to accept a self signed cert. So it sounds like an attacker can harvest credentials on a rogue wifi by spoofing DNS and using a self-signed cert. I don't have an iOS device so I can't test.

This does not appear to be the case (Tested on an iOS 10.3.3 device and an iOS 11 device).

[ Parent | on HN ]

Re:LeakyX, a vulnerability that Apple and Microsoft have kno... by mdeeks on Saturday September 23, 2017 @09:00PM (#15322661)

Thanks for confirming. So then there is nothing at all of substance in this article.

[ Parent | on HN ]