New tool to crack Internet passwords
Source: Agencies |
July 30, 2012, Monday
|
Print Edition
Print Edition
A HACKING expert has launched a US$200 password-cracking tool that makes it easy to decipher Internet traffic sent through a widely used method for securing business communications.
Moxie Marlinspike, one of the world's top encryption experts, unveiled the tool on Saturday during a presentation at the Def Con hacking conference in Las Vegas.
Marlinspike said he developed the service, CloudCracker.com, by taking advantage of a vulnerability he discovered in a widely used virtual private network technology known as point-to-point tunneling protocol.
Virtual private networks, or VPNs, scramble traffic as it travels between a PC and its final destination so the data is useless to hackers if they eavesdrop on those communications.
But Marlinspike provides clients with a tool to analyze captured data streams and create a data file that they upload to his website. He then runs it through code-cracking programs to gain a password to unscramble the protected communications.
With access to Internet traffic, hackers could potentially steal passwords to financial accounts, read business e-mails and learn business secrets.
Marlinspike said he will not screen clients to determine whether they are using it for illegal purposes, but his ultimate intent is to pressure operating systems makers to create safer software.
Moxie Marlinspike, one of the world's top encryption experts, unveiled the tool on Saturday during a presentation at the Def Con hacking conference in Las Vegas.
Marlinspike said he developed the service, CloudCracker.com, by taking advantage of a vulnerability he discovered in a widely used virtual private network technology known as point-to-point tunneling protocol.
Virtual private networks, or VPNs, scramble traffic as it travels between a PC and its final destination so the data is useless to hackers if they eavesdrop on those communications.
But Marlinspike provides clients with a tool to analyze captured data streams and create a data file that they upload to his website. He then runs it through code-cracking programs to gain a password to unscramble the protected communications.
With access to Internet traffic, hackers could potentially steal passwords to financial accounts, read business e-mails and learn business secrets.
Marlinspike said he will not screen clients to determine whether they are using it for illegal purposes, but his ultimate intent is to pressure operating systems makers to create safer software.
- About Us
- |
- Terms of Use
- |
-
RSS - |
- Privacy Policy
- |
- Contact Us
- |
- Shanghai Call Center: 962288
- |
- Tip-off hotline: 52920043
- 娌狪CP璇侊細娌狪CP澶05050403鍙-1
- |
- 浜掕仈缃戞柊闂讳俊鎭湇鍔¤鍙瘉锛31120180004
- |
- 缃戠粶瑙嗗惉璁稿彲璇侊細0909346
- |
- 骞挎挱鐢佃鑺傜洰鍒朵綔璁稿彲璇侊細娌瓧绗354鍙
- |
- 澧炲肩數淇′笟鍔＄粡钀ヨ鍙瘉锛氭勃B2-20120012
Copyright 漏 1999- Shanghai Daily. All rights reserved.Preferably viewed with Internet Explorer 8 or newer browsers.
