4 ms·
Right away they said they are adding HTTPS yet you continue pounding and then broadcast it to the world in HN, seems unreasonable. "just sniffing the wire" wil
by cnlwsu 14y ago
Right away they said they are adding HTTPS yet you continue pounding and then broadcast it to the world in HN, seems unreasonable.
"just sniffing the wire" will only work if your connected to the same dumb hub, modern switches don't broadcast packets on the subnet. ARP poisoning could force their browser to forward the traffic to you and you can forward it on to the gateway. Even that would require you to be on the same subnet. Once they have HTTPS they are protecting you just as much as any other service. If they refused to support HTTPS I would see this being a problem - but they are not.
- theonewolf 14y agoThe problem is that people are signing up with real passwords today without being warned that they _could_ be being compromised. Yes, _tomorrow_ it might be fixed. But today no one knows there is an issue and their password has been exposed.
- projct 14y agoWi-Fi is common enough that Apple has been dropping Ethernet adapters from products. Sounds like the perfect 'dumb hub' to me!