[ NNSquad ] Nokia accused of Man in the Middle attacks on unencrypted and encrypted Internet traffic

[Lauren Weinstein <lauren@vortex.com>]

Nokia accused of Man in the Middle attacks on unencrypted and
encrypted Internet traffic

http://j.mp/13hzYdj  (gaurangkp)

   "When checked trusted certificates in phone it is found that Nokia has
    pre-configured the phone by trusting at least one of these
    certificates, which is the reason why there are no security alerts
    being shown during this Man In The Middle (MITM) attack by Nokia. The
    snapshot given below shows details about each of the three
    certificates that are shown in packet capture."

 - - -

Yet another symptom that the existing PKI is fundamentally flawed.

--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren 
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Founder:
 - Network Neutrality Squad: http://www.nnsquad.org 
 - PRIVACY Forum: http://www.vortex.com/privacy-info
 - Data Wisdom Explorers League: http://www.dwel.org
 - Global Coalition for Transparent Internet Performance: http://www.gctip.org
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren / Twitter: http://vortex.com/t-lauren 
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
nnsquad mailing list
http://lists.nnsquad.org/mailman/listinfo/nnsquad