3 ms·
> You still need to MITM your targets if you obtained private keys. The idea that MitM attacks are "rare" is such b.s. thinking ("Before Snowden"). We known ab
by pdkl95 13y ago
> You still need to MITM your targets if you obtained private keys.
The idea that MitM attacks are "rare" is such b.s. thinking ("Before Snowden"). We known about widespread MitM attacks against big targets (Google, Facebook, and the TOR network at a minimum), and those same techniques can be reused elsewhere.
Given how often it has shown up in the revelations of the last year, I would suggest this may be a fairly common method of attack.
http://articles.latimes.com/2014/mar/12/business/la-fi-tn-nsa-posing-facebook-malware-20140312 http://articles.latimes.com/2014/mar/12/business/la-fi-tn-ns...
https://www.schneier.com/blog/archives/2013/09/new_nsa_leak_sh.html https://www.schneier.com/blog/archives/2013/09/new_nsa_leak_...
https://www.schneier.com/blog/archives/2013/10/how_the_nsa_att.html https://www.schneier.com/blog/archives/2013/10/how_the_nsa_a...
http://en.wikipedia.org/wiki/Tailored_Access_Operations#QUANTUM_attacks http://en.wikipedia.org/wiki/Tailored_Access_Operations#QUAN...
- lucb1e 13y agoI don't think it's bullshit (and you can write that word instead of abbreviating it, it's what you mean to say anyway). MITM might be common in absolute numbers, but it's often not practical for attackers that are not some sort of authority, like, a government.