DEFCON 17: More Tricks For Defeating SSL

Speaker: Moxie Marlinspike

This talk aims to pick up where SSL stripping left off. While sslstrip ultimately remains quite deadly in practice, this talk will demonstrate some new tricks for defeating SSL/TLS in places where sslstrip does not reach. Cautious users, for example, have been advised to explicitly visit https URLs or to use bookmarks in order to protect themselves from sslstrip, while other SSL/TLS based protocols such as imaps, pop3s, smtps, ssl/irc, and SSL-based VPNs never present an opportunity for stripping. This talk will outline some new tools and tricks aimed at these points of communication, ultimately providing highly effective attacks on SSL/TLS connections themselves.


For more information visit: http://bit.ly/defcon17_information

To download the video visit: http://bit.ly/defcon17_videos

• Category

  Science & Technology

[Sporeduck]

He's hosting his own private wireless network. The dreadlock is obviously a disguised antenna.

[VerifyVolatile]

wtf is with his hair LOL

[Aaron Blakely]

3 is a magic number... obviously school house rock realized this and wrote that song about it... but no one figure its real meaning till now.

[Michael Nuttall]

stay in the fetal position, it'll be over soon

[degauze]

DEAR GOD how do us cafe dwellers defend against this?

[HarunDanyal]

lmfao

[kalyantr7]

This antenna is taking all my attention. so I took a small postit and pasted it on my latop sreen where his face is and bk concentrating on the content...lol

[MrDreamReal1]

a wirless router !!