4 ms·
Some background on this: Jacob Appelbaum obtained a copy of Haystack and found serious vulnerabilities that could put users at risk. He convinced Haystack to im
by sweis 16y ago
Some background on this:
Jacob Appelbaum obtained a copy of Haystack and found serious vulnerabilities that could put users at risk. He convinced Haystack to immediately suspend operations.
From what I understand, there was a diagnostics mode that allowed an attacker to identify running copies of the program -- essentially the exact opposite of what it's supposed to do. Even with Haystack's proxy servers shut down, there may still be a risk to any user who has it installed.
This could have easily been prevented. Many people with security backgrounds, including myself, contacted Austin Heap and asked for technical information. He declined. Instead, they went ahead and distributed it to vulnerable live testers.