[16864] in cryptography@c2.net mail archive
A cool demo of how to spoof sites (also shows how TrustBar
daemon@ATHENA.MIT.EDU (Amir Herzberg)
Wed Feb 9 13:30:30 2005
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Wed, 09 Feb 2005 19:41:36 +0200
From: Amir Herzberg <herzbea@macs.biu.ac.il>
Cc: Ian Grigg <iang@systemics.com>, cryptography@metzdowd.com
In-Reply-To: <420A1063.10903@cs.biu.ac.il>
Want to see a simple, working method to spoof sites, fooling
Mozilla/FireFox/... , even with an SSL certificate and `lock`?
http://www.shmoo.com/idn/
See also:
http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=3866526512
Want to protect your Mozilla/FireFox from such attacks? Install our
TrustBar: http://TrustBar.Mozdev.org
(this was the first time that I had a real reason to click the `I don't
trust this authority` button...)
Opinions?
Best, Amir Herzberg
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com