News for hackers. Stuff that matters.

A comment on Just want simple TLS for your .internal network?. Parent comment

Re:Just want simple TLS for your .internal network? by poincaredisk on Tuesday October 22, 2024 @11:16AM (#41915125)
>What is the threat model in which an attacker could MitM your internal network?

Police raid on your home/company. Malware on a router. Malicious actor in the server room. Possibilities are endless.

SSL added and removed here ;-)

(this is a reference, look it up if you don't recognize it)

[ Parent | on HN ]
Re:Just want simple TLS for your .internal network? by cesarb on Tuesday October 22, 2024 @11:35AM (#41915343)
> Malware on a router.

It doesn't even have to be on the router, just the same network segment plus some ARP spoofing tricks (assuming your switch doesn't have ARP spoofing protections or they haven't been enabled) could be enough to MitM a connection.

[ Parent | on HN ]
Re:Just want simple TLS for your .internal network? by marginalia_nu on Tuesday October 22, 2024 @01:51PM (#41916818)
Router malware is the one thing out of those thing that seem plausible.

If you have physical access, TLS isn't much protection against eavesdropping. At that point they can just compromise your hardware instead.

[ Parent | on HN ]