News for hackers. Stuff that matters.

A comment on Decrypting TLS Browser Traffic with Wireshark. Parent comment

Re:Decrypting TLS Browser Traffic with Wireshark by vidarh on Friday February 13, 2015 @07:41AM (#9044011)
If I carelessly execute ~/Downloads/some-binary, my environment variables and config settings are now suspect , while overwriting my firefox binary requires root access.

As such, having the browser loudly warn (irrespective of settings) about such unsafe defaults is still vastly better.

[ Parent | on HN ]
Re:Decrypting TLS Browser Traffic with Wireshark by Animats on Friday February 13, 2015 @02:52PM (#9046779)
As such, having the browser loudly warn (irrespective of settings) about such unsafe defaults is still vastly better.

Yes. Loudly. As in "surrounds entire window with a red frame with INSECURE TEST MODE ENABLED", not as in "pops up notification that quietly fades out".

[ Parent | on HN ]
Re:Decrypting TLS Browser Traffic with Wireshark by nodata on Monday February 16, 2015 @04:44AM (#9056030)
But poisoning your Firefox binary does not require root access. Just preload what you want.
[ Parent | on HN ]