Click here to Skip to main content
15,893,904 members

Welcome to the Lounge

   

For discussing anything related to a software developer's life but is not for programming questions. Got a programming question?

The Lounge is rated Safe For Work. If you're about to post something inappropriate for a shared office environment, then don't post it. No ads, no abuse, and no programming questions. Trolling, (political, climate, religious or whatever) will result in your account being removed.

 
GeneralRe: Darwin Award winner! Pin
RossMW4-Jul-15 10:30
professionalRossMW4-Jul-15 10:30 
GeneralRe: Darwin Award winner! Pin
Mike Hankey4-Jul-15 8:19
mveMike Hankey4-Jul-15 8:19 
GeneralRe: Darwin Award winner! Pin
Dave Kreskowiak4-Jul-15 8:29
mveDave Kreskowiak4-Jul-15 8:29 
GeneralRe: Darwin Award winner! Pin
glennPattonWork34-Jul-15 13:07
professionalglennPattonWork34-Jul-15 13:07 
GeneralRe: Darwin Award winner! Pin
Super Lloyd4-Jul-15 17:10
Super Lloyd4-Jul-15 17:10 
GeneralRe: Darwin Award winner! Pin
90823656-Jul-15 2:41
90823656-Jul-15 2:41 
JokeRe: Darwin Award winner! Pin
Richard Deeming6-Jul-15 4:35
mveRichard Deeming6-Jul-15 4:35 
GeneralAre ISP's intercepting our passwords Pin
Dr Gadgit4-Jul-15 4:44
Dr Gadgit4-Jul-15 4:44 
I suspect that many ISP's and upstream carrier companies are monitoring HTTP Posts request on port eighty for any password and email addresses contained within form posts that come from web-browsers when anyone press the login button.

Nearly all of Europe's traffic is sent via optical cables to England where CGHQ has the means to inspect the traffic before it is sent over to the USA and anyone in France or Germany will know by now that GCHQ has been doing a lot of things it shouldn't be doing.

It is a well known fact that many of the free proxy servers that people harvest only provide the free service just in the hopes that users are stupid enough to login to none secure sites so that these unscrupulous operators can steel login details and they also hope the same login details are being used on Gmail or Facebook because it is human nature for people to use the same details.

ISP's I suspect also have access to common private keys for all major sites and I know they are doing a type of man-in-the-middle HTTPS spying because they hijack DNS lookups even when users elect to use a 3rd party DNS server such as OpenDNS so that means that both HTTP and HTTPS for a domain name resolves to the same ISP's hijacked IP-Address and my ISP hosts many SSL sites that it does not own.

Let's be honest here ISP's such as Comcast are adding a tracking ID to HTTP Headers and if anyone is prepared to pay Comcast for the service then they will resolve the hidden ID to provide your personal details to anyone that's paying and for all I know since our governments have no respect for the laws or our privacy they might also have a mandate to provide the NSA/CIA/GCHQ with our personal login details.

So what can be done !

Well I have knocked up a bit of code that pulls HTTP Forms from web-pages and then parses the HTML to build up a fake post-data string using the correct INPUT box names from the FORM so that a fake login request can be made to the sites using one of two million random full names and a fake password.

The function that I use for making fake login requests to a list of ten thousand sites only send one fake request about every thirty minutes so hopefully ISP's or the NSA will take the bait and since it will take months to complete the list I don't think anyone could accuse me of using brute force to attack a site

So do you think I am being paranoid or breaking any laws if I decide to run the code ?

How the NSA, and your boss, can intercept and break SSL
GeneralRe: Are ISP's intercepting our passwords PinPopular
OriginalGriff4-Jul-15 5:06
mveOriginalGriff4-Jul-15 5:06 
GeneralRe: Are ISP's intercepting our passwords Pin
Mladen Janković4-Jul-15 8:24
Mladen Janković4-Jul-15 8:24 
GeneralRe: Are ISP's intercepting our passwords Pin
Tim Carmichael4-Jul-15 11:00
Tim Carmichael4-Jul-15 11:00 
GeneralRe: Are ISP's intercepting our passwords Pin
Dr Gadgit5-Jul-15 3:46
Dr Gadgit5-Jul-15 3:46 
GeneralRe: Are ISP's intercepting our passwords PinPopular
Pete O'Hanlon4-Jul-15 11:01
mvePete O'Hanlon4-Jul-15 11:01 
GeneralRe: Are ISP's intercepting our passwords Pin
Dr Gadgit5-Jul-15 3:38
Dr Gadgit5-Jul-15 3:38 
GeneralRe: Are ISP's intercepting our passwords Pin
Wes Aday5-Jul-15 8:19
professionalWes Aday5-Jul-15 8:19 
GeneralRe: Are ISP's intercepting our passwords Pin
Dr Gadgit19-Jul-15 1:14
Dr Gadgit19-Jul-15 1:14 
GeneralSuper 15 Pin
bryce4-Jul-15 0:24
bryce4-Jul-15 0:24 
GeneralRe: Super 15 Pin
90823654-Jul-15 0:56
90823654-Jul-15 0:56 
GeneralRe: Super 15 Pin
OriginalGriff4-Jul-15 1:26
mveOriginalGriff4-Jul-15 1:26 
GeneralRe: Super 15 Pin
phil.o4-Jul-15 1:56
professionalphil.o4-Jul-15 1:56 
GeneralRe: Super 15 Pin
C-P-User-34-Jul-15 5:31
C-P-User-34-Jul-15 5:31 
GeneralRe: Super 15 Pin
OriginalGriff4-Jul-15 5:34
mveOriginalGriff4-Jul-15 5:34 
GeneralRe: Super 15 Pin
Richard Deeming6-Jul-15 4:43
mveRichard Deeming6-Jul-15 4:43 
GeneralRe: Super 15 Pin
OriginalGriff6-Jul-15 4:48
mveOriginalGriff6-Jul-15 4:48 
GeneralRe: Super 15 Pin
Richard Deeming6-Jul-15 5:14
mveRichard Deeming6-Jul-15 5:14 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.