Cody Taylor

A security researcher has demonstrated a way to hijack Secure Sockets Layer (SSL) sessions to intercept login data.Moxie Marlinspike, who spoke at the Black Hat security conference on Wednesday, explained how to subvert an SSL session by performing a man-in-the-middle attack. The anarchist researcher explained in…

Open-source pioneers Bill and Lynne Jolitz may be the most famous programmers you’ve never heard of.

Barlaam writes “A bug by router vendor A (omitting a range check from a critical field in the configuration interface) tickled a bug from router vendor B (dropping BGP sessions when processing some ASPATH attributes with length very close to 256), causing a ripple effect that caused widespread global routing instability last week. The flaw lay dormant until one of vendor A’s systems was deployed in an autonomous system whose ASN, modulo 256, was greater than 250. At that point, the Internet was one typo away from disaster. Other router vendors, who were not affected by the bug, happily propagated the trigger message to every vulnerable system on the planet in about 30 seconds. Few people appreciate how fragile and unsecured the Internet’s trust-based critical infrastructure really is — this is just the latest example.” Vendor A, in this case, is a Latvian router vendor called MikroTik.

Read more of this story at Slashdot.