Quantcast

Don't have an account? Register Now! Forgot password?

Maximum IT
News

Tests Show It's Way Too Easy for Fraudsters to Get Digital Certificates

comment Commentsprint Printemail EmailDeliciousDiggStumbleUponRedditFacebookSlashdot

According to a recent security study, low assurance digital certificates have become a new gateway for hackers to get to your personal data, by means of a man-in-the-middle (MITM) attack.

The MITM attack consists of a hacker putting themselves between two parties in a dialogue, such as a person and their bank. Once in place they effectively control the conversation to get login credentials or other, far more valuable information.

Generally, untrustworthy certificates will be halted by error messages or warnings that throw up red flags for potential problems, at least to the more internet-savvy. However, more crafty hackers will often add a legitimately issued certificate to the mix, making even the most secure browsers continue on their merry way, as if nothing has happened.

So how can you keep yourself safe online? Well, at time of press there isn’t any kind of listed fix, but just watch yourself and your information. Acting supremely paranoid can’t hurt, can it?

COMMENTS:1
COMMENTS
avatarThis sucks, I buy stuff on

This sucks, I buy stuff on the internet all the time, using paypal and sometimes just entering in credentials right to the needed place. Even I don't think anything is 100% secure, so yea its pretty scary knowing that someone could already know all about me and have private information without my knowledge what so ever. We need to become more cautious about what we do, and hopefully someone can fix this in the future, but as they say, A hacker will always find his/her a way around.

Login or register to post comments

This Month's Issue
FEATURE How to Get FREE Programs, Services, Software & MoreFEATURE Digital Photo Printer RoundupHOW TOBuild a 3D CameraFEATUREDIY Arcade PCWHITE PAPERHow TRIM Works