False SSL certificates issued for spy agencies

The Tor Project has published a Dutch government compiled a list of bad DigiNotar related certificates in a blog on Sunday. A number of certificates issued wrongly have been created for MI6, while organizations, including Google, Facebook, Twitter, Skype and Tor project itself were also targeted. In all, 531 organizations were affected, Jacob Appelbaum, one of the main developers of the Tor Project, said in the blog.

"The most obvious certs were issued for *.*. *.*. org com and while the Windows Update certificates and certificates for other hosts are limited damage by comparison," said Appelbaum.

Microsoft said Sunday that users of Windows Update are not at risk of exploitation from the certificate windowsupdate.com, as the field is no longer in use.

Google warned on August 29 that its Iranian users were redirected to pages that Google apparently legitimate web services, which used fraudulently generated an SSL certificate to claim that the pages were part of Google.com.

The attack appears to have been used to spy on Iranian Internet on a large scale, enterprise security Trend Micro said in a blog post on Monday, especially those who use Gmail.

"We found that Internet users in more than 40 different ISP networks and universities in Iran have been faced with SSL certificates issued by thugs DigiNotar", Trend Micro Senior Threat Researcher Hacquebord Feike said in the blog. "Worse. We found evidence that some Iranians who have used software designed to circumvent censorship and spying on the traffic is not protected against man-in-the-middle attacks massive"

Trend Micro analyze customer traffic, and found that the validation. Diginotar Validation SSL site.nl was "primarily responsible by the Dutch and Iranian surfers to August 30, 2011," when the false certificates were made public. In addition, the Iranians using technology anti-censorship organization unnamed Californian based on proxy nodes were not protected, said Hacquebord.

The Dutch government has revoked the trust in the certificates DigiNotar, a technician told ZDNet UK government on Monday.

The Dutch government used to recognize two types of certificates DigiNotar until Saturday - certificates issued to the General Affairs and certificates used in the government of its own public key infrastructure (PKI) called "PKIoverheid." The technician advised people to be careful when using PKI Dutch government before the government transfers to a PKI different.

Makani Networks Releases Cloud-enabled Security Products - All ...

NewswireToday - /newswire/ - San Francisco, CA, United States, 06/03/2011 - "Two new cloud-enabled products from Makani Networks - MakAV and MakSSL - enables secure access to online content" - MakaniNetworks.com.

Makani Networks today launched two new cloud-enabled products - MakSSL and MakAV - that can dynamically intercept and scan unencrypted as so then as SSL encrypted content. Rapid proliferation of Apps and online web content for smartphones and tablets represent a new front in the fight against computer threats. Exactly, Apps available from various Apps Marketplaces are quite vulnerable to attacks by hackers who want users' personal information stored on handsets and tablet computers. New laptops and netbooks will as well increasingly be the target of malwares and spywares as they gain popularity. For the most part it is not possible to detect viruses, malwares, adwares, or spywares as they travel into your computing device through Secure Socket Layer connections. The obvious reason is because SSL traffic is encrypted. The MakSSL and MakAV cloud-enabled products from Makani Networks is a "bump-in-the-wire" research that decrypts SSL traffic, passes the traffic through MakAV antivirus scanners and content filters, and at that time re-encrypts the content and sends it on to the end user. Along these lines, unencrypted or SSL encrypted connections infested with worms, viruses, malwares, spywares, adwares, and other malicious content are quickly detected and blocked in real-time. Key technical challenges building the MakSSL and MakAV products include enabling fast dynamic scanning of the content stream. Because computing and I/O resources are limited and on the whole partitioned across disparate compute-intensive functions in a computer system, the traffic scanning process must be made as fast as possible without any perceptual impact to an end-user. Makani Networks achieves this through generous use of RAM Disks such that all the online content is scanned dynamically in-memory. The MakAV scanner scans the online content for in broad outline a million viruses, malwares, spywares, etc. The end result is in the extreme fast scanning of online content, thereby substantially reducing the download latency. An example demo of the MakSSL and MakAV cloud-enabled products is currently made available for users based in North America and demo'ed live at mob.makdns.net.

How to Do Everything Mac

Discovering the Internet, Complete Concepts and Techniques

MIS2

Cyberheist