5 ms·
As recent as 2010 we were finding major flaws in online poker security, here are a couple of videos I did of us sniffing hole cards out of the air because sites
by aelaguiz 13y ago
As recent as 2010 we were finding major flaws in online poker security, here are a couple of videos I did of us sniffing hole cards out of the air because sites were lying about their use of SSL. They were using xOR encryption. Insane.
http://www.youtube.com/watch?v=4HBUe8Fb73Q http://www.youtube.com/watch?v=4HBUe8Fb73Q
http://www.youtube.com/watch?v=AAQDEXJdbQc http://www.youtube.com/watch?v=AAQDEXJdbQc
- SeanDav 13y agoOuch, I suppose the moral of the story is don't play poker for money using a wireless connection.
- kawsper 13y agoThe moral of the story is don't play poker for money where you suspect MITM to be in effect, because the connection is not secure.
- aelaguiz 13y agoIt wasn't a MITM. Although I've done that too, ARP flood the router and redirect the traffic through myself. Only works on sites where they didn't peer validate the SSL cert. These were just packet dumps, wasn't associated with the WAP. It's hard to remember the exact details but I believe I was dumping the packets and decrypting them with the WEP key then piping them into a C program which just applied the decryption key to the packets.
- redthrowaway 13y agoWhy would they even send that information to the client before it was needed anyway? Keep it on the server and push it when, and only when, the client needs to see it.
- qbrass 13y agoIt's catching packets heading to other clients to grab the information they don't send to you. Or it would be if it were put to use for evil.
- tboneatx 13y agoYeah, I remember that. :)