4 ms·
The title of the article wasn't very worrying to me, so I read the whole article, and I was trying to figure what in this article is actually a cause for concer
by thetruthseeker1 11y ago
The title of the article wasn't very worrying to me, so I read the whole article, and I was trying to figure what in this article is actually a cause for concern. I actually didnt find any "significant" cause of concern.
I have worked in the area of computer networking for many years. My guess is, one of the things the black box product is doing is typically looking for TCP or IP traffic patterns(packet flow patterns) that indicate say command control type of malware, or other malwares, that don't have much resemblance to packet flow signature of user browsing activity.
Also, this blackbox won't be able to decode HTTPs anyway. So may not be a privacy concern for most people?
- tommica 11y agoI might have misunderstood completely, but if this one is in between the packages, why couldn't it do some MITM attacks?
- nindalf 11y agoMy understanding is that it can decode all HTTPS traffic because it acts as a Man-in-the-Middle. Traffic from the client to the Fidelis device is encrypted with a Fidelis certificate. Its decrypted at the device, encrypted again with the actual certificate and sent to the destination. If it couldn't do this, I think it would be impossible to distinguish benign traffic from malicious traffic.