4 ms·
In my opinion, its a critical feature. Consider that in 2024 even this public forum is accessed in an encrypted form by even non-logged in users. Here's an uns
by night862 3y ago
In my opinion, its a critical feature.
Consider that in 2024 even this public forum is accessed in an encrypted form by even non-logged in users. Here's an unstructured list of some of the reasons:
Man in the middle attacks achieving remote code execution on client or server
Surveillance and/or stalking
Presence monitoring
Psychological analysis (Maybe a user is drunk, maybe they're in a good or bad mood today.)
Command injection or deletion
Most people use services with no regard to any of these things and most will never be subject to them. If a precocious hacker teen, controlling spouse or parent, spyware/adware company, censorship application, oppressive state regime, rogue sysadmin, rival player or any such of the endless possible yet rare actors decide that your service is best suited to these ends, it is now more or less trivial to develop a plugin for their evil device.
TERMINAL EMULATOR SECURITY ISSUES 2003 https://marc.info/?l=bugtraq&m=104612710031920&q=p3 https://marc.info/?l=bugtraq&m=104612710031920&q=p3