Re:OpenSSL.org hacked?
by devdoomari on Saturday December 28, 2013 @10:06PM
(#6978077)
but what if they set-up the server side so that the server returns different results depending on the browser/OS?
[ Parent
| on HN ]
Re:OpenSSL.org hacked?
by dangrossman on Saturday December 28, 2013 @10:08PM
(#6978086)
$ curl -A "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36" www.openssl.orgBut what if they return a joke, so funny, that it kills whoever reads it?
Then they should split on spaces and only read one word at a time
Re:OpenSSL.org hacked?
by HCIdivision17 on Sunday December 29, 2013 @11:29AM
(#6980052)
This is a proven method, but care must be taken to make sure no individual gets more than on word to translate at a time.
https://en.m.wikipedia.org/wiki/The_funniest_joke_in_the_wor...
They might be looking for client addresses of specific targets. Then again, if they were trying for a "bank shot" attack on some particular target, they almost certainly wouldn't be trashing the front page to let the world know that the whole site is compromised.