News for hackers. Stuff that matters.

A comment on The Anatomy Of The Twitter Attack. Parent comment

Re:The Anatomy Of The Twitter Attack by wallflower on Sunday July 19, 2009 @08:19AM (#712886)
Google will have to eventually respond (with action) to that and more security concerns outlined in this June 2009 open letter to the Google CEO demanding 'security by default' from 38 leading security researchers including Bruce Schneier and Ron Rivest.

http://files.cloudprivacy.net/google-letter-final.pdf

[ Parent | on HN ]
Re:The Anatomy Of The Twitter Attack by talison on Sunday July 19, 2009 @02:06PM (#713187)
They did respond. Kind of.

http://googleonlinesecurity.blogspot.com/2009/06/https-secur...

[ Parent | on HN ]
Re:The Anatomy Of The Twitter Attack by sriramk on Sunday July 19, 2009 @07:11PM (#713565)
but the original attack wouldn't have changed one bit with SSL. Peter Guttman wrote a great paper on how we defend where the attackers aren't attacking. SSL in this case would have been one such example. Of course, SSL has value in other cases (sniffing, ensuring you're talking to the right site, etc) but is no panacea.
[ Parent | on HN ]