 | reply to jmn1207
Re: Who's next? It's a man in the middle attack, the attacker intercepts the data, and passes it through after recording it. Think of it as a guy standing in line in front of you that relays all your information to the teller, not only do you and the teller complete the transaction in the normal manner but the guy in the middle has all the data too. The problem as already noted is that it won't work on an encrypted connection.
You shouldn't be passing ANY login information in clear text. If the connection isn't encrypted you shouldn't be logging in. |