Security: Sift Talk: The important stuff: Gmail hack

4 months 3 weeks ago • 417 views

http://www.hungry-hackers.com/2008/08/gmail-account-hacking-tool.html

I would advise you set the stuff to be HTTPS and not HTTP.

Defcon unveiled Arphid snoopers and clones as well as gmail trouble.

Thought I needed to let the fellow sifters know.

comments (7)

bookmarks (0)

Comments

Good tip, thanks. It also makes sense, as always, to log out of your account when you're done.

Oh, and congrats on the Gold!

written by schmawy

| 4 months 3 weeks ago | CH

▲ 0 ▼ | flag spam (0)

so...what does this mean for my porn browsing?

written by rottenseed

| 4 months 3 weeks ago | CH

▲ 2 ▼ | flag spam (0)

should be ok, as long as your router is secure ..and the porn is 18 and up.

Because ISPs are logging every thing now. Most porn is HTTP transfer, but any thing that deals with internet is subject to man in the middle.

Besides rotten.. arent you behind seven proxies?

written by NordlichReiter

| 4 months 3 weeks ago | CH

▲ 1 ▼ | flag spam (0)

>> ^schmawy:
Good tip, thanks. It also makes sense, as always, to log out of your account when you're done.

Oh, and congrats on the Gold!

Tanks

written by NordlichReiter

| 4 months 3 weeks ago | CH

▲ 0 ▼ | flag spam (0)

Thanks for the good tip.

*Quality

written by MarineGunrock

| 4 months 3 weeks ago | CH

▲ 0 ▼ | flag spam (0)

Awarding NordlichReiter with one star point for this contribution to Sift Talk - declared quality by MarineGunrock.

written by siftbot

| 4 months 3 weeks ago | CH

▲ 0 ▼ | flag spam (0)

Yay! Thank you so much. Just to be sure, the nature of these sniffer-thingies requires a compromised computer or network, right?

written by NicoleBee

| 4 months 2 weeks ago | CH

▲ 0 ▼ | flag spam (0)

There are many different ways to sniff and spoof. These things are not common knowledge but they are the required learning for network IT guys.

Spoofing: Making a persons router think that you are the admin, and making the persons computer think you are the router. Man in the middle attack. This is a compromised network. See ARP spoofing, or UDP Spoofing, or SYN ACK attack.

Sniffing un compromised networks: In these we can snoop traffic, therefore any thing sent over a HTTP session can be snooped for and ripped open with a packet sniffer, HTTPS makes this harder. You throw a baseball, some one catches it, and then reads whats on the ball then sends it along. No network is safe from that unless, its a private network with no internet connection. Now it is possible to find these snoopers, by hop transfer time estimation. If a normally fast connection takes forever to return a page, then it could be a sign of an attack. If you have a notable ISP, or a good firewall and a secure HTTPS site like .gov or bank sites then it is a bit safer. That doesnt stop the ISPs from tracking your stuff.

In short if you have a firewall, you are safe from hijacking, but when you send stuff out over the internet (Like this comment here) then it is possible some one will read it. That is the nature of the beast.

If you suspect that the traffic is going some where it shouldn't be, trace its route to the server. I did a trace to this page from my gateway and it has about about 11 hops, traffic spikes once it makes its way over towards the west coast, thats normal from the east coast.

http://visualroute.visualware.com/

http://www.selfseo.com/find_ip_address_of_a_website.php - this page doesnt send you to a web server, it sends you to a gateway, where your traffic stops.

I am not a professional, and I have no affiliation with the above systems linked. From your friendly neighborhood white hat.