So.. That's everyone in the Uk then?Uk Could Ban Pirates from using the web
So.. That's everyone in the Uk then?Uk Could Ban Pirates from using the web
Hi,
Interesting story not sure how this will be policed or how the DPA will be changed to release personnal info of our members to other ISP's without a court order!
If I do hear any more of this I will keep you posted but at this point I would not worry to much.....
Who on here has EVER used P2P for legal stuff?! PMSL
I was listening to the radio this morning, and it said that P2P is often used for "legal" file sharing. Who on here has EVER used P2P for legal stuff?! PMSL
I was listening to the radio this morning, and it said that P2P is often used for "legal" file sharing. Who on here has EVER used P2P for legal stuff?! PMSL
BBC iplayer uses P2P. C4OD uses P2P.
Using a 256 bit cipher to encrypt your session makes it virtually impossible for anyone anywhere to hack.
There are services readily available that allow you to do this.
As security becomes more of an issue on the net more applications will have the option to use encrypted tunnelling (much like online banking does). This will give people more privacy when sending and receiving data.
Using a 256 bit cipher to encrypt your session makes it virtually impossible for anyone anywhere to hack.
There are services readily available that allow you to do this.
As security becomes more of an issue on the net more applications will have the option to use encrypted tunnelling (much like online banking does). This will give people more privacy when sending and receiving data.
exactly! What I dont understand is why the fools in westminster dont already know this thus making what they propose impossible. I dont use torrents just newsgoups which download with 256bit SSL encryption. I read somewhere today that there are like 4 supercomputers in existence on the planet which could break this level of encryption with a brut force attack and even then it would take weeks. The funny thing is the government seem to think BT are capable of this:lolup: :lolup:
exactly! What I dont understand is why the fools in westminster dont already know this thus making what they propose impossible. I dont use torrents just newsgoups which download with 256bit SSL encryption. I read somewhere today that there are like 4 supercomputers in existence on the planet which could break this level of encryption with a brut force attack and even then it would take weeks. The funny thing is the government seem to think BT are capable of this:lolup: :lolup:
I wouldn't count on thinking that SSL/TLS ensures your security, you should always check the certificate of the site that you are connected to.
TLS/SSL is susceptable to a number of different "man in the middle" style attacks. If you pretend to be the server to the client and the client to the server then only requirement is that the client has to accept the server certificate.
There are two ways of doing this:
A) Either the user has to say "yes" to the warning that pops up that the server certificate wasn't signed by a root ca.
B) Your ISP forces you to install a root ca certificate that they've generated. They dynamically create server certificates as you connect and sign them with their root ca.
'B' would allow complete transparent spoofing, you would only be able to tell by viewing the certificate (double clicking on your padlock) and checking who signed the certificate.
Plusnet (iirc) did at one point in time throttle encrypted traffic with their very expensive equipment.
sorry never worked:
sorry never worked:
Sorry, no idea. I can't find any specific details on what newsbin does with it's handling of SSL.
Things that would be interesting to know about it:
* what it does when the certificate is not signed by a trusted root ca
* what key exchange & encryption options it offers to the server.
It should be pointed out that it's also highly unlikely that you would be subject to the kind of attack I mentioned above....i'm just pointing out that because you think you're talking ssl to a server, doesn't necessarily mean that you can trust that server. It requires interaction on your part to be 100% sure that you are talking to who you think you are!
Sorry, no idea. I can't find any specific details on what newsbin does with it's handling of SSL.
Things that would be interesting to know about it:
* what it does when the certificate is not signed by a trusted root ca
* what key exchange & encryption options it offers to the server.
It should be pointed out that it's also highly unlikely that you would be subject to the kind of attack I mentioned above....i'm just pointing out that because you think you're talking ssl to a server, doesn't necessarily mean that you can trust that server. It requires interaction on your part to be 100% sure that you are talking to who you think you are!
So you dont think it's likely that BT would attempt an attack like this? I've been reading around on some tech forums and it would appear the way newsbin handles SSL is vulnerable to the types of attacks you mentioned. I canot find out how to view the root certificate through newsbin so Im beggining to wonder if it's possible. From what I can gather you have to use a program to create an ssl tunnel. In that newsbin communicates with the program and the program then communicates with the newsgroup server. A program called "stunnel" appears to be mentioned a lot and it should only accept root certificates signed by the newsgroup server. However it got way to technical for my level of PC understanding so I think I will have to ask my brother:S
So you dont think it's likely that BT would attempt an attack like this? I've been reading around on some tech forums and it would appear the way newsbin handles SSL is vulnerable to the types of attacks you mentioned. I canot find out how to view the root certificate through newsbin so Im beggining to wonder if it's possible. From what I can gather you have to use a program to create an ssl tunnel. In that newsbin communicates with the program and the program then communicates with the newsgroup server. A program called "stunnel" appears to be mentioned a lot and it should only accept root certificates signed by the newsgroup server. However it got way to technical for my level of PC understanding so I think I will have to ask my brother:S
Zero chance!
My point was more to do with SSL/TLS. Just because you see a padlock on your web browser, you shouldn't assume that you have a nice secure connection, you should always verify the certificate yourself.