E-Commerce Security Is Broken, Vulnerable, Says Hacker Conference Founder

    Date29 Jul 2010
    CategoryCryptography
    2876
    Posted ByAnthony Pell
    Lots of code excitement will spring from the Black Hat hacker conference this week, but already a huge controversy is erupting: Black Hat's founder thinks SSL--the security code making much of online commerce safe--is broken. SSL, Secure Sockets Layer (and its successor Transport Layer Security) is a Net-based security protocol that ensures communications between computers is safe and unhackable--essentially so that no one can "listen in." It works like this: A server and computer connect together and say hello, digitally. This bit is unsecured. The two machines exchange a "key" which unlocks a private line that only they can communicate on.

    These private exchanges are the basis of safe e-shopping, including credit card transactions. On the server side the site's owners can be certain they're speaking to a genuine customer, who's data can be trusted (to an extent).

    You are not authorised to post comments.

    LinuxSecurity Poll

    What is your favorite LinuxSecurity.com feature?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /component/communitypolls/?task=poll.vote&format=json
    17
    radio
    [{"id":"65","title":"Feature articles","votes":"0","type":"x","order":"1","pct":0,"resources":[]},{"id":"66","title":"News","votes":"1","type":"x","order":"2","pct":50,"resources":[]},{"id":"67","title":"HOWTOs","votes":"1","type":"x","order":"3","pct":50,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    Advisories

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.