3 ms·
The exchange between Troy Hunt and Jacob Baytelman is a little aggravating for me--they appear to be talking past each other. Jacob challenges him to "hack [hi
by robrtsql 7y ago
The exchange between Troy Hunt and Jacob Baytelman is a little aggravating for me--they appear to be talking past each other.
Jacob challenges him to "hack [his] static blog". I don't know what 'hacking a website' means to him, but to you and me it probably means compromising the web server, which is not directly related to HTTPS (although I can think of a lot of ways that the use of HTTP could lead to a web server being compromised).
Troy responds by taking him up on this challenge, accuses Jacob of thinking that his site is immune from transport layer risks, and then performs a man in the middle attack on himself using Jacob's site (when in reality literally any HTTP site could have been used).
It's like these two are having completely separate conversations.
- jrajav 7y agoIf you read the Twitter exchange leading up to the 'challenge accepted' tweet linked in the article (https://twitter.com/troyhunt/status/1014736960542289922 https://twitter.com/troyhunt/status/1014736960542289922), it's clear that the context of 'hack' is specifically about man-in-the-middle injections. That is, hacking his static blog as it is served up to users. And arguably, the fact that nearly any HTTP site could have been used for the demo is partly the point.
- baddox 7y agoIt’s clearly not clear to Jacob, since he eventually says “I am afraid you will only demo MITM attack on the traffic.”