News for hackers. Stuff that matters.

A comment on API Shouldn't Redirect HTTP to HTTPS. Parent comment

Re:API Shouldn't Redirect HTTP to HTTPS by Control8894 on Thursday May 30, 2024 @05:49PM (#40529094)
It doesn't matter if the wifi is encrypted or not. All that matters is that you share the network with an attacker. You can ARP poison just fine, encrypted or open, wifi or wired.
[ Parent | on HN ]
Re:API Shouldn't Redirect HTTP to HTTPS by chaorace on Thursday May 30, 2024 @06:10PM (#40529280)
Well, actually... you can only successfully launch an ARP poisoning attack if you're on the same network segment as the impersonated host.

(Yes, I am indeed being pedantic on purpose to prove a point. I offer this parenthetical to you in place of an apology)

[ Parent | on HN ]