End-To-End Web Crypto: A Broken Security Model
(Indolering): https://www.indolering.com/e2e-web-crypto
"Researchers have been testing the efficacy of security iconography for
over a decade, and the results are dismal. The most dramatic
"experiment" was performed by Moxie Marlinspike in 2009. Marlinspike
removed encryption from connections using a malicious Tor exit node,
which also removed the browser encryption icons. Despite drawing his
sample from a population with above average technical acumen and
paranoia, he achieved a 100% "success" rate; meaning that every user
who visited a login page logged into to their account. Marlinspike
collected over 400 logins and 16 credit card numbers in 24 hours."
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
