return to tranceaddict TranceAddict Forums Archive > Main Forums > Chill Out Room

Pages: [1] 2 
Internet Explorer Users, SSL is NOT secure
View this Thread in Original format
JohnSmith
Oh , I just found out today that SSL has been hacked. Basically, if you are connected to an SSL site (when you see the little lock in the status bar), and you think that everything is secure, it's really not. someone can intercept that data, your credit cards and personal information can be logged to a file by anyone out there!

Versions 5.0, 5.5 are vulnerable. version 6 has SORT OF patched this, but can still be vulnerable in certain cicumstances.

here is a link to the article in the register.

http://www.theregister.co.uk/content/4/26620.html

I also have a link to how to actually exploit this, but i'm not posting it.

, guess i'm not buying anything on the web for a while.
ali92
quote:
Originally posted by JohnSmith
Oh , I just found out today that SSL has been hacked. Basically, if you are connected to an SSL site (when you see the little lock in the status bar), and you think that everything is secure, it's really not. someone can intercept that data, your credit cards and personal information can be logged to a file by anyone out there!

Versions 5.0, 5.5 are vulnerable. version 6 has SORT OF patched this, but can still be vulnerable in certain cicumstances.

here is a link to the article in the register.

http://www.theregister.co.uk/content/4/26620.html

I also have a link to how to actually exploit this, but i'm not posting it.

, guess i'm not buying anything on the web for a while.

Is this the same for Mozilla browser? I stopped using IE6 a month ago.
Nook
i don't think anything is secure, so this doesn't suprises me anymore.
Clyde77
is there an alternative for IE? i mean like the best one that a hacker cant get in to. thanks for letting us know by the way.



clyde
Nook
opera is pretty good, don't know if it's hackfree tho.
JohnSmith
quote:
Originally posted by ali92

Is this the same for Mozilla browser? I stopped using IE6 a month ago.


in the link i posted it says:

Mozilla was not vulnerable, but I'm not sure if that's because it handled the situation properly, or is, ironically, somehow too buggy to be exploited.
dj_s_harrison
What if you have a firewall ?
Nook
well, it's working via your browser, and your browser is allowed to connect from your computer and vice versa, so i don't think it helps. at least. that's what i think.
igottaknow
this type of thing is over blown IMHO. I've bought plenty over the net without a problem. Its more likely and easier to go tru a business's garbage and steal credit card numbers from receipt carbons than be smart enough to hack into a SSL server. btw, ppl die in car recks every day, but im still am goin to drive.
dj_s_harrison
Well lets hope someone wernt taking a peek @ my IE last nite cuz i bought a few things

JohnSmith
quote:
Originally posted by igottaknow
this type of thing is over blown IMHO. I've bought plenty over the net without a problem. Its more likely and easier to go tru a business's garbage and steal credit card numbers from receipt carbons than be smart enough to hack into a SSL server. btw, ppl die in car recks every day, but im still am goin to drive.


well, that's true. it's all a matter of calculated risk. For example, i calculate the risk of driving a car to my health, to be low enough to make up for the benefits.

and, i have always known there is some amount of risk with putting your CC numbers over the net. but i have purchased anyway, because it's so convenient and easy to get stuff this way.

however, this brings new circumstances into play. it is very easy to get hacked like this, anyone with linux, and an SSL certificate can intercept any amount of data they want from any server.

imagine they did this to paypal? the consequences could be huge. this is not overblown.

but, keeping buying online if you want to, that is your right.
igottaknow
didnt mean to dismiss your concern as nothing. i agree u need to balance your risk/reward ratio.
CLICK TO RETURN TO TOP OF PAGE
Pages: [1] 2 
Privacy Statement