Re:Parents demand academic publisher drop Proctorio surveill...
by nitrogen on Tuesday December 22, 2020 @02:46PM
(#25510305)
That only works if you use a hub instead of a switch, or if the traffic is broadcast, or if you somehow convince the switch to give your port all traffic. It's easiest to just use two NICs bridged in one PC as a MITM.
[ Parent
| on HN ]
Re:Parents demand academic publisher drop Proctorio surveill...
by mschuster91 on Tuesday December 22, 2020 @03:32PM
(#25510880)
You can also easily run an ARP spoofing attack, and not just to sniff but also to manipulate. Done that quite often back in my school time, oh the glorious days when web traffic was mostly plain HTTP.
There were entire command lists going around specifying what exactly one needed to replace, say, the logo of an online newspaper with a picture of a dong.