Internet Explorer Users, SSL is NOT secure

TranceAddict Forums (www.tranceaddict.com/forums)
- Chill Out Room
-- Internet Explorer Users, SSL is NOT secure

Posted by JohnSmith on Aug-12-2002 18:23:

Internet Explorer Users, SSL is NOT secure

Oh shit, I just found out today that SSL has been hacked. Basically, if you are connected to an SSL site (when you see the little lock in the status bar), and you think that everything is secure, it's really not. someone can intercept that data, your credit cards and personal information can be logged to a file by anyone out there!

Versions 5.0, 5.5 are vulnerable. version 6 has SORT OF patched this, but can still be vulnerable in certain cicumstances.

here is a link to the article in the register.

http://www.theregister.co.uk/content/4/26620.html

I also have a link to how to actually exploit this, but i'm not posting it.

fuck, guess i'm not buying anything on the web for a while.

Posted by ali92 on Aug-12-2002 19:40:

Re: Internet Explorer Users, SSL is NOT secure

quote:
Originally posted by JohnSmith
Oh shit, I just found out today that SSL has been hacked. Basically, if you are connected to an SSL site (when you see the little lock in the status bar), and you think that everything is secure, it's really not. someone can intercept that data, your credit cards and personal information can be logged to a file by anyone out there!

Versions 5.0, 5.5 are vulnerable. version 6 has SORT OF patched this, but can still be vulnerable in certain cicumstances.

here is a link to the article in the register.

http://www.theregister.co.uk/content/4/26620.html

I also have a link to how to actually exploit this, but i'm not posting it.

fuck, guess i'm not buying anything on the web for a while.

Is this the same for Mozilla browser? I stopped using IE6 a month ago.

Posted by Nook on Aug-12-2002 19:49:

i don't think anything is secure, so this doesn't suprises me anymore.

Posted by Clyde77 on Aug-12-2002 19:49:

is there an alternative for IE? i mean like the best one that a hacker cant get in to. thanks for letting us know by the way.

clyde

Posted by Nook on Aug-12-2002 19:58:

opera is pretty good, don't know if it's hackfree tho.

Posted by JohnSmith on Aug-12-2002 20:07:

Re: Re: Internet Explorer Users, SSL is NOT secure

quote:
Originally posted by ali92

Is this the same for Mozilla browser? I stopped using IE6 a month ago.

in the link i posted it says:

Mozilla was not vulnerable, but I'm not sure if that's because it handled the situation properly, or is, ironically, somehow too buggy to be exploited.

Posted by smh on Aug-12-2002 20:09:

What if you have a firewall ?

Posted by Nook on Aug-12-2002 20:11:

well, it's working via your browser, and your browser is allowed to connect from your computer and vice versa, so i don't think it helps. at least. that's what i think.

Posted by igottaknow on Aug-12-2002 20:12:

this type of thing is over blown IMHO. I've bought plenty over the net without a problem. Its more likely and easier to go tru a business's garbage and steal credit card numbers from receipt carbons than be smart enough to hack into a SSL server. btw, ppl die in car recks every day, but im still am goin to drive.

Posted by smh on Aug-12-2002 20:17:

Well lets hope someone wernt taking a peek @ my IE last nite cuz i bought a few things

Posted by JohnSmith on Aug-12-2002 20:26:

quote:
Originally posted by igottaknow
this type of thing is over blown IMHO. I've bought plenty over the net without a problem. Its more likely and easier to go tru a business's garbage and steal credit card numbers from receipt carbons than be smart enough to hack into a SSL server. btw, ppl die in car recks every day, but im still am goin to drive.

well, that's true. it's all a matter of calculated risk. For example, i calculate the risk of driving a car to my health, to be low enough to make up for the benefits.

and, i have always known there is some amount of risk with putting your CC numbers over the net. but i have purchased anyway, because it's so convenient and easy to get stuff this way.

however, this brings new circumstances into play. it is very easy to get hacked like this, anyone with linux, and an SSL certificate can intercept any amount of data they want from any server.

imagine they did this to paypal? the consequences could be huge. this is not overblown.

but, keeping buying online if you want to, that is your right.

Posted by igottaknow on Aug-12-2002 20:31:

didnt mean to dismiss your concern as nothing. i agree u need to balance your risk/reward ratio.

Posted by JohnSmith on Aug-12-2002 20:44:

yep. BTW, i don't drive a car, but it has nothing to do with risk, just the price of insurance for a year is more than triple the cost of my beater car, not to mention the price of gas and maintenace.

bike gets me around fine.