Re: Web Traffic Security and Eavesdropping

agree with that... has lots of information, but it doesn't say anything


Jorge L. Vazquez
blog: www.pctechtips.org


David Crandell wrote:
That article is wicked!

Kinda one of those blindingly-obvious concepts....

Dave Crandell
Vice President, Information Systems
On Hold Media Group
972-758-1300
david@xxxxxxxxxxxxxxxx


-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx] On
Behalf Of Shreyas Zare
Sent: Wednesday, November 12, 2008 10:31 AM
To: mojorising
Cc: security-basics@xxxxxxxxxxxxxxxxx
Subject: Re: Web Traffic Security and Eavesdropping

Hi,

I think this (http://blog.wired.com/27bstroke6/2008/08/revealed-the-in.html)
will explain how.

Regards,

On Tue, Nov 11, 2008 at 6:46 AM, mojorising <moj0rising@xxxxxxx> wrote:

Hi, there. We all know many web sites out there encrypt connections with

SSL

to prevent eavesdropping on user sessions. In a conversation about this
today while securing web services/ applications of one of our sites, a
friend asked how such a thing is possible if the eavesdropper is not on

the

same network as the end-user or server being watched. I couldn't provide a
very good answer and was wondering if anyone out there could. We know how
easy it would be if you were on the same network or had access to one of

the

nodes on either end or even, perhaps, a switch or router, etc in between
those two points.

Basically, the question is, can someone out there in the big, bad,

internet

somehow watch all traffic going to and from another node on the internet
(like a web server for example) without being on the same local network as
the node they are watching? I'm quite sure the answer to this is yes and

if

yes, then how is it done?


Thanks,
Mike




--
Shreyas Zare
Co-Founder, Technitium
eMail: shreyas@xxxxxxxxxxxxxx

..::< The Technitium Team >::..
Visit us at www.technitium.com
Contact us at theteam@xxxxxxxxxxxxxx

"Even if you're on the right track, you'll get run over if you just sit
there."
--Will Rogers

"So run ..."
-- Shreyas Zare

Join Sci-Tech News group and get the latest science & technology news
in your inbox. Visit http://tech.groups.yahoo.com/group/sci-tech-news
to join.