{"id":4259,"date":"2009-11-22T16:12:09","date_gmt":"2009-11-22T14:12:09","guid":{"rendered":"http:\/\/www.burks.de\/burksblog\/?p=4259"},"modified":"2009-11-22T16:12:30","modified_gmt":"2009-11-22T14:12:30","slug":"sslstrip-und-etherpad","status":"publish","type":"post","link":"https:\/\/www.burks.de\/burksblog\/2009\/11\/22\/sslstrip-und-etherpad","title":{"rendered":"SSLSTRIP und Etherpad"},"content":{"rendered":"<p>Ich empfehle <a href=\"http:\/\/etherpad.com\/\">Etherpad<\/a>: &#8222;EtherPad is the only web-based word processor that allows people to work together in really real-time. When multiple people edit the same document simultaneously, any changes are instantly reflected on everyone&#8217;s screen. The result is a new and productive way to collaborate on text documents, useful for meeting notes, drafting sessions, education, team programming, and more.&#8220;<\/p>\n<p>Und jetzt zu etwas ganz Anderem: Sehr interessant ist <a href=\"http:\/\/www.thoughtcrime.org\/software\/sslstrip\/\">SSLSTRIP<\/a>. Ein oberfl\u00e4chlicher, &#8222;aktueller&#8220; und gewohnt linkfreier <a href=\"http:\/\/www.taz.de\/1\/leben\/internet\/artikel\/1\/schwachpunkt-wlan-hotspot\/\">Artikel der taz<\/a> vom 19.11. brachte mich auf die Idee, selbst zu recherchieren. Das Event, auf dem dieser m\u00f6gliche Angriff auf HTTPS vorgestellt wurde, fand schon im Februar statt.<\/p>\n<p>&#8222;This tool provides a demonstration of the <a href=\"http:\/\/en.wikipedia.org\/wiki\/HTTP_Secure\">HTTPS<\/a> stripping attacks that <a href=\"http:\/\/www.blackhat.com\/presentations\/bh-dc-09\/Marlinspike\/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf\">I presented<\/a> at <a href=\"http:\/\/www.blackhat.com\/html\/bh-dc-09\/bh-dc-09-main.html\">Black Hat DC 2009<\/a>. It will transparently hijack HTTP traffic on a network, watch for HTTPS links and redirects, then map those links into either look-alike HTTP links or homograph-similar HTTPS links.&#8220;<\/p>\n<div class=\"pdfprnt-buttons pdfprnt-buttons-post pdfprnt-bottom-right\"><a href=\"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts\/4259?print=pdf\" class=\"pdfprnt-button pdfprnt-button-pdf\" target=\"_blank\" ><img decoding=\"async\" src=\"https:\/\/www.burks.de\/burksblog\/wp-content\/plugins\/pdf-print\/images\/pdf.png\" alt=\"image_pdf\" title=\"PDF anzeigen\" \/><\/a><a href=\"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts\/4259?print=print\" class=\"pdfprnt-button pdfprnt-button-print\" target=\"_blank\" ><img decoding=\"async\" src=\"https:\/\/www.burks.de\/burksblog\/wp-content\/plugins\/pdf-print\/images\/print.png\" alt=\"image_print\" title=\"Inhalt drucken\" \/><\/a><\/div><div class=\"twoclick_social_bookmarks_post_4259 social_share_privacy clearfix 1.6.4 locale-de_DE sprite-de_DE\"><\/div><div class=\"twoclick-js\"><script type=\"text\/javascript\">\/* <![CDATA[ *\/\njQuery(document).ready(function($){if($('.twoclick_social_bookmarks_post_4259')){$('.twoclick_social_bookmarks_post_4259').socialSharePrivacy({\"services\":{\"facebook\":{\"status\":\"on\",\"txt_info\":\"2 Klicks f\\u00fcr mehr Datenschutz: Erst wenn Sie hier klicken, wird der Button aktiv und Sie k\\u00f6nnen Ihre Empfehlung an Facebook senden. Schon beim Aktivieren werden Daten an Dritte \\u00fcbertragen - siehe <em>i<\\\/em>.\",\"perma_option\":\"off\",\"action\":\"recommend\",\"language\":\"de_DE\"},\"twitter\":{\"reply_to\":\"\",\"tweet_text\":\"%20SSLSTRIP%20und%20Etherpad%20%C2%BB%20Burks%27%20Blog%20-%20in%20dubio%20pro%20contra.%20De%20omnibus%20...\",\"status\":\"on\",\"txt_info\":\"2 Klicks f\\u00fcr mehr Datenschutz: Erst wenn Sie hier klicken, wird der Button aktiv und Sie k\\u00f6nnen Ihre Empfehlung an Twitter senden. Schon beim Aktivieren werden Daten an Dritte \\u00fcbertragen - siehe <em>i<\\\/em>.\",\"perma_option\":\"off\",\"language\":\"de\",\"referrer_track\":\"\"}},\"txt_help\":\"Wenn Sie diese Felder durch einen Klick aktivieren, werden Informationen an Facebook, Twitter, Flattr, Xing, t3n, LinkedIn, Pinterest oder Google eventuell ins Ausland \\u00fcbertragen und unter Umst\\u00e4nden auch dort gespeichert. N\\u00e4heres erfahren Sie durch einen Klick auf das <em>i<\\\/em>.\",\"settings_perma\":\"Dauerhaft aktivieren und Daten\\u00fcber-tragung zustimmen:\",\"info_link\":\"http:\\\/\\\/www.heise.de\\\/ct\\\/artikel\\\/2-Klicks-fuer-mehr-Datenschutz-1333879.html\",\"uri\":\"https:\\\/\\\/www.burks.de\\\/burksblog\\\/2009\\\/11\\\/22\\\/sslstrip-und-etherpad\",\"post_id\":4259,\"post_title_referrer_track\":\"SSLSTRIP+und+Etherpad\",\"display_infobox\":\"on\"});}});\n\/* ]]> *\/<\/script><\/div>","protected":false},"excerpt":{"rendered":"<p>Ich empfehle Etherpad: &#8222;EtherPad is the only web-based word processor that allows people to work together in really real-time. When multiple people edit the same document simultaneously, any changes are instantly reflected on everyone&#8217;s screen. The result is a new and productive way to collaborate on text documents, useful for meeting notes, drafting sessions, education, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21,31],"tags":[],"class_list":["post-4259","post","type-post","status-publish","format-standard","hentry","category-internet-and-computer","category-protect-your-privacy"],"_links":{"self":[{"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts\/4259","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/comments?post=4259"}],"version-history":[{"count":2,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts\/4259\/revisions"}],"predecessor-version":[{"id":4261,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts\/4259\/revisions\/4261"}],"wp:attachment":[{"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/media?parent=4259"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/categories?post=4259"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/tags?post=4259"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}