NNSquad - Network Neutrality Squad

NNSquad Home Page

NNSquad Mailing List Information

 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ NNSquad ] Re: Free Press/Public Knowledge Investigation Finds NebuAd Wiretaps Consumers and Hijacks Web Sites 

Note also that it is already known how a site can defend against this:

http://www.cs.washington.edu/research/security/web-tripwire.html

Which will detect the injected Javascript as a modification.


Additionally, Phorm is slightly different (as a MITM redirector, per
Richard Clayton's anaysis), which ends up adding session cookies.  A
site like google, whenever the user redirects to HTTPS, can detect
these additional cookies and, if desired, notify the user.