News, analysis and context on enterprise technology for the CTO
During the recent security conference Hack In The Box, security researchers from Qualys Labs showcased the fruits of their efforts to scan the Internet’s websites for proper implementation of security features like SSL and its successor TLS. What they found could only be described as dismal. SSL stands for Secure Sockets Layer, and TLS for Transport Layer Security. While these two protocols share the same purpose, it’s important to note … [Read more...]
Firesheep is a great new plugin that works in the Firefox browser. It is easy for you to install, easy to run, and gives you, and just about anyone else, the power to do pure evil using just your browser and a laptop. With this post I'll explain some of this evil and offer some thoughts on what it means for CTOs. First a bit about the code itself, from the author: When logging into a website you usually start by submitting your username and password. … [Read more...]