|
I suspect that many ISP's and upstream carrier companies are monitoring HTTP Posts request on port eighty for any password and email addresses contained within form posts that come from web-browsers when anyone press the login button.
Nearly all of Europe's traffic is sent via optical cables to England where CGHQ has the means to inspect the traffic before it is sent over to the USA and anyone in France or Germany will know by now that GCHQ has been doing a lot of things it shouldn't be doing.
It is a well known fact that many of the free proxy servers that people harvest only provide the free service just in the hopes that users are stupid enough to login to none secure sites so that these unscrupulous operators can steel login details and they also hope the same login details are being used on Gmail or Facebook because it is human nature for people to use the same details.
ISP's I suspect also have access to common private keys for all major sites and I know they are doing a type of man-in-the-middle HTTPS spying because they hijack DNS lookups even when users elect to use a 3rd party DNS server such as OpenDNS so that means that both HTTP and HTTPS for a domain name resolves to the same ISP's hijacked IP-Address and my ISP hosts many SSL sites that it does not own.
Let's be honest here ISP's such as Comcast are adding a tracking ID to HTTP Headers and if anyone is prepared to pay Comcast for the service then they will resolve the hidden ID to provide your personal details to anyone that's paying and for all I know since our governments have no respect for the laws or our privacy they might also have a mandate to provide the NSA/CIA/GCHQ with our personal login details.
So what can be done !
Well I have knocked up a bit of code that pulls HTTP Forms from web-pages and then parses the HTML to build up a fake post-data string using the correct INPUT box names from the FORM so that a fake login request can be made to the sites using one of two million random full names and a fake password.
The function that I use for making fake login requests to a list of ten thousand sites only send one fake request about every thirty minutes so hopefully ISP's or the NSA will take the bait and since it will take months to complete the list I don't think anyone could accuse me of using brute force to attack a site
So do you think I am being paranoid or breaking any laws if I decide to run the code ?
How the NSA, and your boss, can intercept and break SSL
|
|
|
|
|
Just because you are paranoid, doesn't mean your name is Marvin...
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
Dr Gadgit wrote: ISP's I suspect also have access to common private keys for all major sites and I know they are doing a type of man-in-the-middle HTTPS spying
Extraordinary claims require extraordinary evidence.
|
|
|
|
|
Mladen Janković wrote: xtraordinary claims require extraordinary evidence.
Yes they do, and, if evidence if provided, are we willing to believe?
|
|
|
|
|
Extraordinary claims require extraordinary evidence.
Good point and the best i can give you is that David Cameron want to stop people using encryption only that GCHQ cannot decrypt and not regular HTTPS so that says to me our SSL traffic is an open book.
You might like to read back about ISP's hijacking DNS lookups in regards to SSL traffic.
Both the Germans and the French have caught the NSA/GCHQ spying on them so are you trying to say the likes of Google would not share it's private keys with the NSA when they are only too willing to share our private data with them.
Logic is very hard to argue with i thinks
|
|
|
|
|
You're right and because this is a never ending cycle of them battling ever increasing levels of incursion, I reckon that you need to take pre-emptive action now. The only way you can avoid having all your details stolen is to quit the internet now. Obviously we'll miss you but it'll be for the best and we hope you have a secure future in your bunker.
|
|
|
|
|
NO running away is not the answer and i find that poking a peeping tom in the eys soon stops them.
|
|
|
|
|
Dr Gadgit wrote: NO running away is not the answer
Well you are certainly right about that. What you should really do instead is to run as quickly as you can to your medical professional and have them up your medication.
You can lead a developer to CodeProject, but you can't make them think.
The Theory of Gravity was invented for the sole purpose of distracting you from investigating the scientific fact that the Earth sucks.
|
|
|
|
|
The argument is not if ISP's can intercept our password but are they and I happen to think they are so save the insults because it makes you look like a kid in the school playground.
You need to stop taking the medication you want me to take and start thinking for yourself!
|
|
|
|
|
Hiiiiiiiiiiiighlanders!!!!!!!
B
MCAD
---
|
|
|
|
|
Earthman, it is sometimes difficult to follow your mode of speech! 
|
|
|
|
|
|
|
I wouldn't go to that barber !
|
|
|
|
|
You think you might lose your head? 
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
A strange claim for a film which had four sequels. 
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
...all of them total twaddle.
I mean - the first wasn't good (Herself is a Queen fan, so I had to watch it quite a few times) but the others? Good grief, I'd rather watch Sharknado for it's incredible realism...
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
OriginalGriff wrote: I'd rather watch Sharknado for it's incredible realism...
How about the sequels - The Second One[^] and Oh Hell No![^]?
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Oh, For Elephants Sake! 
They made sequels?
Why does that smell of money laundering?
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
Not quite what I was expecting. But congrats to them. I had no preference in the game.
|
|
|
|
|
I see so many sample code on this page and plan to take a deep dive on these samples.
Do you have any suggestion/feedback on this page?
https://code.msdn.microsoft.com/
|
|
|
|
|
|
You would be better off reading articles here. The good ones tell you why the code is the way it is.
|
|
|
|
|
Anyone used / use CodeFluent's Entities Professional? I qualify for a free license for a year. In the past, when I've used products like this, they generated a bunch of gobble de gook code, but the process looks intriguing.
Appreciate your thoughts....
Charlie Gilley
<italic>Stuck in a dysfunctional matrix from which I must escape...
"Where liberty dwells, there is my country." B. Franklin, 1783
“They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759
|
|
|
|
|
Hi All,
After an awful interview on Thursday (one of the interviewers walked out to take an important call on his mobile!) Had an a hopeful interview today. The best part was when I was told one the Recruitment Agents (from the description I think I know who it was) handed the employer a CV in 'their' format was asked if he wanted to interview them, replied 'not really, the details aren't there', was handed a second format of the same person to which he replied 'Yes, so much so I am interviewing him tomorrow', It was my CV! Do these 'professionals' know what they are doing?
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
