This is truly amazing.
Lately I’ve been playing a whole lot of this game. Pure awesome…
Ed Bott zdnet.com
IE6 users, it’s time to move on. Your IT staff has had more than three years to come up with alternatives to IE6. If they can’t handle it, maybe it’s time to replace them, too.
An anonymous reader writes “Nine weeks after Moxie Marlinspike presented at Defcon 17, null-prefix certificates that exploit the SSL certificate vulnerability are beginning to appear. Yesterday, someone posted a null-prefix certificate for www.paypal.com on the full-disclosure mailing list. In conjunction with sslsniff, this certificate can be used to intercept communication to PayPal from all clients using the Windows Crypto API, for which a patch is still not available. This includes IE, Chrome, and Safari on Windows. What’s worse, because of the OCSP attack that Moxie also presented at Defcon, this certificate cannot be revoked.”
Update: 10/06 23:19 GMT by KD: Now it seems that PayPal has suspended Marlinspike’s account.
Here is a Link to Wire shark, if you are interested it will allow you to see inside your computers, network traffic.