Re:Bypassing Browser Security Warnings with Pseudo Password ...
by throwaway2016a on Thursday November 02, 2017 @03:44PM
(#15613593)
If you have a mass target sure, there are better attacks.
But if you target is only a single network, packet sniffing is pretty effective and is stopped by HTTPS.
And if you target is a single person or small group of enumerable machines, arp poisoning still works on many (most?) networks.
Personally I am more scared of the damage that can be caused by being a direct target than I am having my info in one of those massive dark-web data dumps.
Edit: Also, the ops post is actually an example of a MitM (where the ISP is the one in the middle). I just expanded it to the superset.
But if you target is only a single network, packet sniffing is pretty effective and is stopped by HTTPS.
And if you target is a single person or small group of enumerable machines, arp poisoning still works on many (most?) networks.
Personally I am more scared of the damage that can be caused by being a direct target than I am having my info in one of those massive dark-web data dumps.
Edit: Also, the ops post is actually an example of a MitM (where the ISP is the one in the middle). I just expanded it to the superset.