Forged security certificate allows hackers to target Google users' conversations

   Aug 31, 11:14 am

London, Aug 31 (ANI): Security researchers have reportedly found a forged Internet security certificate that allows hackers to spy on Google users' private emails and communications.

The forgery was first reported by an Iranian web user, which has raised concerns that it may be part of efforts by the Tehran government to monitor dissidents.

The 'man in the middle' attack also further undermines general confidence in the Secure Sockets Layer (SSL), a security protocol used to authenticate all kinds of sensitive Internet traffic, including online banking, the Telegraph reports.

According to the report, DigiNotar, a Dutch SSL certificate authority, issued the forgery to the unknown attackers on July 10.

This certificate would have allowed hackers to setup fake copies of Google websites that appeared genuine to the majority of users, and collect login information for all of the company's services, including Gmail.

Today Vasco, DigiNotar's parent company, admittred in a statement that it had also been hacked, and that it issued more than one forged certificate as a result.

"On July 19th 2011, DigiNotar detected an intrusion into its certificate authority infrastructure, which resulted in the fraudulent issuance of public key certificate requests for a number of domains, including Google.com," it said.

"At that time, an external security audit concluded that all fraudulently issued certificates were revoked. Recently, it was discovered that at least one fraudulent certificate had not been revoked at the time," it added. (ANI)

Android Wear's first major update adds offline Music, GPS, Bluetooth headphones Oct 24, 5:57 pm
Washington, Oct 24 (ANI): Google's Android Wear is reportedly getting its first big update, with features like offline music, Bluetooth headphone and GPS support to help make it more of a standalone device.
Full Story
Facebook wants good old 'chatrooms' back Oct 24, 5:57 pm
Washington, Oct 24 (ANI): Social media giant Facebook reportedly wants to bring back the old 'chatrooms' where people could strike up conversations with strangers about subjects they were all interested in.
Full Story
Google releases more 'sorted' version of Gmail app 'Inbox' Oct 24, 5:57 pm
Washington, Oct 24 (ANI): Google on Thursday announced a revamped version of its Gmail app called Inbox, which seeks to change how emails are organized.
Full Story
Toshiba to supply 10,000 energy storage systems for Eneres Oct 24, 3:17 pm
Tokyo, Oct. 23 (ANI): Toshiba Corporation on Thursday announced that it has been selected to supply 10,000 energy storage systems by Eneres Co., Ltd., a pioneer in providing business solutions to independent power producers and suppliers (PPS).
Full Story
Comments

LATEST STORIES
TOP VIDEO STORIES
PHOTO GALLERY