http://www.boingboing.net/2005/02/0...loit_.html
Sunday, February 6, 2005
Shmoo Group exploit: 0wn any domain, no defense exists
Pablos sez, "Shmoocon ended today. And just to prove The Shmoo Group wasn't
sitting on their asses for the entire time while planning the con - A new
exploit was demo'd by EricJ that left all jaws our on the floor. Want to
own ANY domain? Want a trusted SSL cert for it? Check it out here. We
0wnz0rd PayPal, but left the rest for you. We have no idea how to fix this
and neither do the browser developers. Official advisory here. Phishing
attacks of doom coming soon." Link (Thanks, Pablos!)
Leer las respuestas