Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!usenet.blueworldhosting.com!feeder01.blueworldhosting.com!feeder.erje.net!eu.feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Jolly Roger <jollyroger@pobox.com>
Newsgroups: comp.sys.mac.system
Subject: Re: Latest IOS/OS X SSL security flaw
Date: 22 Feb 2014 22:19:50 GMT
Organization: People for the Ethical Treatment of Pirates
Lines: 29
Message-ID: <bmsm46Fn3b4U4@mid.individual.net>
References: <lears8$l8d$1@dont-email.me> <QYOdnZ14PrOOZZXOnZ2dnUVZ_t-dnZ2d@giganews.com> <wwvvbw63oc8.fsf@l1AntVDjLrnP7Td3DQJ8ynzIq3lJMueXf87AxnpFoA.invalid> <EsKdne4pJL0AmJTOnZ2dnUVZ_sudnZ2d@giganews.com> <wwvmwhi3lcb.fsf@l1AntVDjLrnP7Td3DQJ8ynzIq3lJMueXf87AxnpFoA.invalid> <D-2dnXZP6MFNiJTOnZ2dnUVZ_g6dnZ2d@giganews.com> <wwvha7q3ifb.fsf@l1AntVDjLrnP7Td3DQJ8ynzIq3lJMueXf87AxnpFoA.invalid>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Trace: individual.net LVZ951nk4avsIV0utbwwDgya6HnE3gGypuDpnB3hQOb99/F/rV
Cancel-Lock: sha1:dWxOkzdHicwNK2PzxCQFFjzytlo=
X-Face: _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1<n@LQ!aZ7vLO_nWbK~@T'XIS0,oAJcU.qLM dk/j8Udo?O"o9B9Jyx+ez2:B<nx(k3EdHnTvB]'eoVaR495,Rv~/vPa[e^JI+^h5Zk*i`Q;ezqDW< ZFs6kmAJWZjOH\8[$$7jm,Ogw3C_%QM'|H6nygNGhhl+@}n30Nz(^vWo@h>Y%b|b-Y~()~\t,LZ3e up1/bO{=-)
User-Agent: slrn/1.0.1 (Darwin)
Xref: csiph.com comp.sys.mac.system:56860

On 2014-02-22, Richard Kettlewell <rjk@greenend.org.uk> wrote:
> Alan Browne <alan.browne@FreelunchVideotron.ca> writes:
>> Richard Kettlewell wrote:
>>> Alan Browne <alan.browne@FreelunchVideotron.ca> writes:
>>>> The word "only" is not required to keep that sentence restrained to
>>>> the case described.  And logically, to be MitM, one has to be "inside"
>>>> the router/WiFi firewall.
>>>
>>> MITM refers to an attacker capable of reading, deleting, modifying and
>>> synthesizing messages between legitimate actors.  See, for instance,
>>> s3.1 of Applied Cryptography for more detail.  It is not limited to any
>>> particular network configuration.
>>
>> Fair enough.  OTOH It's pretty clear in this case that the MitM has to
>> within your network.
>
> The opposite is clear.  I’ve listed several possible mechanisms for
> actually carrying out the MITM element in a previous post.  They are not
> speculation.  As just one example, see:
> http://www.renesys.com/2013/11/mitm-internet-hijacking/
> for multiple recent observations of BGP-based active interception.

Great writeup. Thanks.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR