News for hackers. Stuff that matters.

A comment on New attack plucks secrets from HTTPS-protected pages. Parent comment

Re:New attack plucks secrets from HTTPS-protected pages by bradleyjg on Thursday August 01, 2013 @01:07PM (#6141744)
For the attack to work you need to be able to eavesdrop on the ciphertext. Network protocols don't make any particular effort to prevent that, although the move from shared ethernet to switched ethernet has made it more difficult.
[ Parent | on HN ]
Re:New attack plucks secrets from HTTPS-protected pages by adamtj on Thursday August 01, 2013 @03:49PM (#6142996)
Arp spoofing works even over switched ethernet. With it, you can convince other machines that yours is their gateway, and then you can not only see, but modify all their network traffic.

https://en.wikipedia.org/wiki/ARP_spoofing

[ Parent | on HN ]
Re:New attack plucks secrets from HTTPS-protected pages by cma on Thursday August 01, 2013 @01:19PM (#6141847)
The rise of wifi means there is still a lot of shared ethernet.
[ Parent | on HN ]