Re: I'd like to get rid of pulseaudio but ... (Gene Heskett)

On Mon, Jun 01, 2009 at 14:01:54 -0500,
Chris Adams <cmadams@xxxxxxxxxx> wrote:

ISTR if you can snoop you can hijack the TCP session setup by responding
first (aren't out-of-window packets ignored?). You don't have to cause
the "real" responses to be dropped, you just have to respond faster.

That's still an active attack. You have to be able to see the incoming packets
and try to send replies back fast. You need to be doing this from some
place that doesn't do proper egress filtering or very close to the destination.
This is still hard to do broadly, unlike being able to peruse through all of
the traffic that goes through major exchange points on the internet.

And be sure to note that certificate signed by RSA, Thawte or whoever doesn't
equate to secure either. Unless you have verified the end certificate
yourself you don't know that the organization on the other end is who you
really mean to be talking to.

You are trusting that the CAs have done the verification, which they do
(to differing degrees).

They don't have a way to verify that the site I am going to is the one I
mean to. It isn't that hard to trick someone to going to a valid https
site, that isn't really the one they mean to. And Firefox doesn't try to
help with this case at all.

The whole hierarchical design is a bad fit for what it is trying to do.
Web of trust would be a lot better. But even with the current system the
Firefox UI could do more to help people notice changes.

--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Relevant Pages

  • Re: FC3 Seems to "Freeze" sometimes
    ... >>I'm having a wierd to me problem with FC3. ... >>then eventually it starts responding again. ... >>It seems to happen when Firefox is open, though I have that open a lot ... I've seen KDE, Firefox or Thunderbird mentiond on this ...
    (Fedora)
  • Re: Computer become very slow if left on.
    ... machine starts responding very slowly.If I leave the machine ... unlocking the screen lock take ages and the machine becomes ... gig memory and I've about 2 gigs of free space on my ... Could be Firefox. ...
    (Ubuntu)
  • Re: IE locks-up when.........
    ... responding). ... > PS-Are you able to get a copy of Firefox? ... > Virus Removal Instructions: http://home.neo.rr.com/manna4u/ ...
    (microsoft.public.windowsxp.general)
  • Re: "Not responding" -
    ... Mozilla Firefox causing it. ... Both not responding. ... I was told 3G of RAM was sufficient. ...
    (microsoft.public.windows.vista.general)
  • Re: How regularly is the GnuPG source code examined?
    ... > No cheap shots were taken. ... I was merely responding to your ... > statements about testing versus verification. ... Tom ...
    (sci.crypt)