xtrapsp
2013-09-06 08:28:03
From: NKN
https://encyclopediadramatica.se/PRISM#Parabon_Leaks
http://www.scribd.com/doc/162984271/SSL-Locksmith
gf PRISM
also dont download the torrent, IP's are being logged
There's nothing wrong with downloading Torrents. Only illegal torrents
DemiseScythe
2013-09-06 09:16:52
From: xtrapsp
There's nothing wrong with downloading Torrents. Only illegal torrents
He meant that torrent specifically
lol who cares if the torrent is tracked there is nothing wrong in downloading something for educational purposes right?
and im pretty dam curious what's in this torrent will post pics of contents in anybody is interested
edit: downloaded the torrent contains pretty much what was on that site thought i was going to find some interesting reading gonna have my dinner and have another look.
grats
2013-09-06 12:50:31
From: CRU1Z1N
lol who cares if the torrent is tracked there is nothing wrong in downloading something for educational purposes right?
and im pretty dam curious what's in this torrent will post pics of contents in anybody is interested
edit: downloaded the torrent contains pretty much what was on that site thought i was going to find some interesting reading gonna have my dinner and have another look.
I downloaded a debian torrent today
#breakindalaw
b0bzilla
2013-09-06 15:01:03
SSL Locksmith is nothing new or special. It's a standard man-in-the-middle SSL product.
I tried to include links but I'm a noob here so it's blocking me.
Web serach: accessdata ssl locksmith
Wikipedia: man in the middle attack
If you know the other certificate of the other party you can verify it and you cannot be attacked this way.
This issue has been around since day 1. It does kind of suck that browsers have somewhat weak support for validation. Most of them only warn you if the site URL doesn't match what is in the certificate. An SSL proxy like this will create a look-alike certificate so the browser can be fooled. As long as the proxy has a root certificate that is in the browsers list of trusted roots (like verisign).
Once you truly have someone's public key and a program that checks it (properly) there is no way to impersonate or decrypt. But getting that public key in a trustworthy fashion has always been an interesting challenge. The GPG guide talks about making a fingerprint and validating it over the phone with the other party.
