Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. ×
Security

Submission + - Microsoft TMG (OMG!) security (microsoft.com)

m2f2 writes: I was talking with a colleague of mine about the new incarnation of good ol' Microsoft ISA server, the TMG edition.

Browsing thru the filtering options I found this little gem (http://technet.microsoft.com/en-us/library/dd441053.aspx). To inspect https traffic, nothing better than generating your fake certificate in the name of the target site, acting as man-in-the-middle.
So when accessing www.yourbank.com you will be presented with a fake certificate issued by Microsoft TMG, Internet Explorer will trust it because signed by a CA in your trusted ring et voilà... your banking session ends — in cleartext — at proxy level.

Nice way to get sure that techies will do their ebanking at home.

Submission + - Falling leaves, failing domains ...

m2f2 writes: Network solutions may have a problem. A series of domains (one of which, an NGO, I am pleased to administer) have been disabled yesterday and put on "pending renewal".
Their own records tell that the domain expires on 21-Jun-2010 but admin and tech contacts now are the limbo of pendingrenewalordeletion@networksolutions.com.
How many of the ./'ers have been there, and ... what have they done?
Cheers

Slashdot Top Deals

"Don't think; let the machine do it for you!" -- E. C. Berkeley

Working...