Willkommen in dem Jahr, in dem wir Kontakt aufnehmen werden

September 5th, 2008

..as a twitter-plugin in WP didn’t work for a while, here is the history of most of my tweets in the meantime:

Reblog this post [with Zemanta]
August 30th, 2008
Image representing Gmail as depicted in CrunchBaseImage via CrunchBase, source unknown

Shared by natadd

Very important!! You should always use SSL (https://) for Gmail!

A tool that automatically steals IDs of non-encrypted sessions and breaks into Google Mail accounts has been presented at the Defcon hackers’ conference in Las Vegas.

Last week Google introduced a new feature in Gmail that allows users to permanently switch on SSL and use it for every action involving Gmail, and not only, authentication. Users who did not turn it on now have a serious reason to do so as Mike Perry, the reverse engineer from San Francisco who developed the tool is planning to release it in two weeks.

When you log in to Gmail the website sends a cookie (a text file) containing your session ID to the browser. This file makes it possible for the website to know that you are authenticated and keep you logged in for two weeks, unless you manually hit the sign out button. When you hit sign out this cookie is cleared.

Even though when you log in, Gmail forces the authentication over SSL (Secure Socket Layer), you are not secure because it reverts back to a regular unencrypted connection after the authentication is done. According to Google this behavior was chosen because of Read the rest of this entry »

  • Translator

  • Categories

  • Follow

    Follow Me!

  • Back in the days

  • Listen

  • The usual suspects

  • Tags

  • Questions?

  • Page 1 of 11