Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?

Submission Summary: 0 pending, 2 declined, 0 accepted (2 total, 0.00% accepted)

Take advantage of Black Friday with 15% off sitewide with coupon code "BLACKFRIDAY" on Slashdot Deals (some exclusions apply)". ×

Submission + - Microsoft TMG (OMG!) security (microsoft.com)

m2f2 writes: I was talking with a colleague of mine about the new incarnation of good ol' Microsoft ISA server, the TMG edition.

Browsing thru the filtering options I found this little gem (http://technet.microsoft.com/en-us/library/dd441053.aspx). To inspect https traffic, nothing better than generating your fake certificate in the name of the target site, acting as man-in-the-middle.
So when accessing www.yourbank.com you will be presented with a fake certificate issued by Microsoft TMG, Internet Explorer will trust it because signed by a CA in your trusted ring et voilà... your banking session ends — in cleartext — at proxy level.

Nice way to get sure that techies will do their ebanking at home.

Submission + - Falling leaves, failing domains ...

m2f2 writes: Network solutions may have a problem. A series of domains (one of which, an NGO, I am pleased to administer) have been disabled yesterday and put on "pending renewal".
Their own records tell that the domain expires on 21-Jun-2010 but admin and tech contacts now are the limbo of pendingrenewalordeletion@networksolutions.com.
How many of the ./'ers have been there, and ... what have they done?

"Necessity is the mother of invention" is a silly proverb. "Necessity is the mother of futile dodges" is much nearer the truth. -- Alfred North Whitehead