Join us at IRC!
Hacking isn't just Computers & Exploits. It's a Philosophy. - Mr_Cheese
Wednesday, May 23, 2012
Navigation
Members Online
Total Online: 36
Web Spiders: 15
Guests Online: 32
Members Online: 4

Registered Members: 70160
Newest Member: Furtif
Latest Articles
View Thread

HellBound Hackers | HellBound Hackers | Projects

Author

A different way to tackle online encryption. Thoughts?

Mb0742
Member



Posts: 189
Location:
Joined: 26.11.07
Rank:
Hacker Level 2
Posted on 04-02-12 03:24
So first let me say I realise this may not be practical but I want your opinions.

So lets say you are a bank, and as such you want all data over the wire encrypted so that even somebody listening on wireshark for example cannot intercept your files. An obvious solution is https here but lets say you wanted to be creative.


User A accesses Bank B

Bank B acknowledges that User A wishes to log in and takes note on what useragent is being submitted.

Bank B Sends a page with a javascblockedript line which only produces error in said browser, along with session ID

user A, browser c doesn't respond well to [example error code] and responds with 867px instead of [css.style.element] (for example).

Using both the sessionID and the error output all code is encrypted into one key parameter and submitted over https.


Thoughts?





Mb
javascript:alert("hi")
Author

RE: A different way to tackle online encryption. Thoughts?

Arabian
Member



Posts: 320
Location: inside you.
Joined: 22.09.10
Rank:
God
Posted on 04-02-12 06:43
That'd be cool, until the browsers update and then you lose your only form of encryption. What's wrong with some simple RSA?


Hare Lambda!

Author

RE: A different way to tackle online encryption. Thoughts?

Mb0742
Member



Posts: 189
Location:
Joined: 26.11.07
Rank:
Hacker Level 2
Posted on 04-02-12 06:46
Well for fun. But agreed rsa is the way to go about it


Mb
javascript:alert("hi")
Guest
Username

Password

Remember Me


Bookmark This Page
Affiliates
Adverts

 

 

Links
By using, viewing or obtaining any information contained on this site, you agree to the disclaimer.

© HellBound Hackers 2008- 2009. Since 3rd December 2004.