Re:Chrome 68 will mark all HTTP sites as “not secure”
by gmueckl on Friday February 09, 2018 @12:44AM
(#16338157)
Wait. This is a DHCP exploit on steroids. The MITM stuff is just possible because operating systems accept bonkers DHCP replies.
[ Parent
| on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure”
by Ajedi32 on Friday February 09, 2018 @09:29AM
(#16340369)
Yeah, the DHCP trick is what allows this particular method of conducting MITM via USB.
All the stuff it does _after_ becoming a MITM though are things that any MITM could do, regardless of how they became a MITM in the first place. (ARP spoofing, operating or compromising a Wi-Fi access point, etc.)