Prolomeno šifrování SSL
Zdroj: www.itbiz.cz
Předmět | Autor | Datum |
---|---|---|
samotné šifrovanie prlomené nebolo,bolo "prelomené" len to,ako sa dá efektívne zneužiť ukradnutie pr… audax 22.09.2011 16:26 |
audax | |
konkretnejsie (kto hlada ten najde o tom vela): problem je uz davno znamy, ale vyzaduje to manipulac… MM.. 22.09.2011 23:19 |
MM.. | |
This is exactly cold content and additionally i love to read this approach content. your blog is nor… sreosese 19.03.2024 12:09 |
sreosese | |
Fantastic Put up, I'm sure a giant believer through post feed-back concerning webpages towards allow… ghori92 04.04.2024 16:03 |
ghori92 | |
I am just genuinely thrilled to come across this great site along with does get pleasure from lookin… ghori92 06.04.2024 13:57 |
ghori92 | |
I have a soft position for classic cakes like chocolate, vanilla, red and velvet. They never go out… poslední seomam 11.05.2024 14:40 |
seomam |
Zpět na aktuality Přidat komentář k aktualitě Nahoru
samotné šifrovanie prlomené nebolo,bolo "prelomené" len to,ako sa dá efektívne zneužiť ukradnutie prihlasovacích údajov a ukradnutie certifikátu pomocou vhodne načasovaného spustenia exploitu...pokial zneužijem prihlasovacie údaje,dostanem sa síce tam kam nemám,ale to ešte neznamená,že som prelomil šifrovanie ako také.....
konkretnejsie (kto hlada ten najde o tom vela): problem je uz davno znamy, ale vyzaduje to manipulaciu komunikacie (asi preto ten javascript) a dost vela vypoctoveho vykonu na nasledne dekodovanie, z toho dovodu to bolo a je povazovane len za teoreticke nebezpecie (a neni to prelomenie sifry, prelomenie sifry by znamenalo zezachytis data a dekodujes ich bez manipulacie). T.j. priamo prelomene neni nic (ptz to vyzaduje predosly uspesny utok na klienta, co spravidla neplati, a keby platilo tak uz rovno mi ten trojan moze precitat z klavesnice heslo, a nemusi prelamovat SSL).
Mozme sa hadat ci to je prakticky pouzitelne podobne ako sa hadaju ludia co o tom naozaj nieco vedia napr. tu item, ja to povazuem za dalsie teoreticke "halo" do zbierky, bez praktickeho nebezpecia.
P.S> ale je nutne dodat ze teoreticky je to zneuzitelne niekym kto je schopny manipulovat komunikaciu (napr. ISP), ten mi ale moze podstrcit rovno aj fake certifikat alebo sa hrat na man-in-the-middle, a potom nepotrebuje nic prelamovat. SSL nikdy nebolo bezpecene co sa tyka fake cert a MIM.
This is exactly cold content and additionally i love to read this approach content. your blog is normally terrific while you experience wonderful office personnel into your web page. excellent stating continue. vîzeya Erebistana Siûdî ji bo hemwelatiyên çînî yên Macau
Fantastic Put up, I'm sure a giant believer through post feed-back concerning webpages towards allow the blog page consultants recognise that they’ve further a specific thing positive towards the web! designer perfume fragrances
I am just genuinely thrilled to come across this great site along with does get pleasure from looking at valuable content put up below. Your concepts in the publisher ended up being wonderful, cheers to the talk about. Pharmaceutical Sales Training
I have a soft position for classic cakes like chocolate, vanilla, red and velvet. They never go out of style! Heart Cake