Hi All !

I was browsing the net and stumbled across this article on ZDNet. Researchers have come across an open source tool that is capable of launching automated man-in-middle attacks against popular sites such as Gmail and Facebook. This tool, Middler, is designed to target users who access services via public networks in hotels, coffee shops and aeroplanes. Besides launching man-in-the-middle attacks, in which communications are intercepted so the attacker can pass his own data between the website and the client device, the tool can also compromise computers and even iPhones via their software-update mechanisms.

The tool is intended to demonstrate a particular weakness found in many popular online applications — the use of clear-text HTTP transmissions for much of the user session.

Read more »