26 ms·
just use https and you will be safe.
by ausjke 10y ago
just use https and you will be safe.
- mifreewil 10y agoNot sure why all the downvotes, this seems to be mostly true - although this is more advice for site/domain admins rather than users themselves. There may be some caveats, such as an otherwise secure site using https, except for using regular-http redirects (which the PosionTap device could intercept) without using strict transport security with preloading.
- ChuckMcM 10y agoNot if the tap is pretending to be a keyboard and injecting keystrokes into your input stream. Make it a compound device, keyboard, mouse, and network port and you're kind of off to the races.
- grey-area 10y agoFor certain values of safe. Poisoning the DNS subsystem of your computer is not safe. At the very least it could record which requests you made indefinitely. This does need to be fixed.
- mifreewil 10y ago> Poisoning the DNS subsystem of your computer is not safe. At the very least it could record which requests you made indefinitely. This does need to be fixed. I'm assuming that if a domain used DNSSEC this would protect the user against this type of attack?
- fulafel 10y agoIf your upstream DNS server and your OS support DNSSEC, it might require small changes to the attack (spoofing IP addresses instead of DNS names). There really is no substitute for end-to-end crypto in networking.