Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]

Re: New whitepaper "The Phishing Guide"

Subject: Re: New whitepaper "The Phishing Guide"
Date: Mon, 27 Sep 2004 10:39:27 -0500
Seth Arnold wrote:
http://www.internetnews.com/dev-news/article.php/721571

Even the best-known X.509 Certification Agency has made screwups
regarding one of the best-known publicly traded corporations. How hard
do you think it would be to get certificates for something that sounds
plausibly like a bank? Credit card company?

I totally agree with what you (and others) wrote. Most of the current registrars fall from the sky some time ago, telling us that they are "trusted" entities (yeah right). Even without that incident you mentioned, would you trust company whose bussiness practices include hijacking of DNS name space (scandal with wildcard .com and .net entries) or sending deceptive domain renewals via mail? Probably not.


My point was that currently corporations are not even attempting to use the tools they have available. It is more important to them that message is nicely HTML formated, than putting even basic security precausins (such as signing with x509 certificate).

--
Aleksandar Milivojevic <amilivojevic@pbl.ca>    Pollard Banknote Limited
Systems Administrator                           1499 Buffalo Place
Tel: (204) 474-2323 ext 276                     Winnipeg, MB  R3T 1L7

<Prev in Thread] Current Thread [Next in Thread>