4 ms·
When you really consider what people are suggesting it's silly. My important apps use SSL, no one is going to waste an SSL break at DEFCON. Turning data off is
by TACIXAT 11y ago
When you really consider what people are suggesting it's silly. My important apps use SSL, no one is going to waste an SSL break at DEFCON. Turning data off is just an inconvenience, though it does make the conference seem more excited for the uninitiated.
Blackhat is so expensive that it's almost entirely government and corporate employees. Always struck me as a bit of a misnomer.
- fryguy 11y agoThe thing is, it only takes one non-TLS web request to be harmed. There are a number of attacks that can be done that require MITM and/or local snooping that are easily done at a conference like this (the TLS export-level security downgrade recently, BREACH/CRIME, etc). There were a number a few years back before HSTS was around where it would hijack people going to http://google.com http://google.com and capture their cookies before it redirected to https://google.com https://google.com. These might seem trivial now, but what will people think 5-10 years ago about the things that are possible now.
- totony 11y agoIt's actually a quite good place to monitor traffic that people think is encrypted, since the people here are quite high-profile