Skip to main content

#Verpasstodon

Lauschangriff auf russischen Jabber-Server in Deutschland: Wer steckt dahinter?

Rein zufällig flog auf, dass sich Unbekannte mit einem eigenen Zertifikat in Jabber-Chat-Verbindungen einklinkten. Die Betreiber vermuten eine Polizeiaktion.

heise.de/news/Lauschangriff-au…

#Jabber #Let'sEncrypt #ManintheMiddle #Security #XMPP


Lauschangriff auf russischen Jabber-Server in Deutschland: Wer steckt dahinter?

Dr. Christopher Kunz (heise online)
#xmpp #security #Jabber #verpasstodon #let #maninthemiddle
in reply to heise online

XSF: XMPP Standards Foundation
XSF: XMPP Standards Foundation
• •

To reduce the risk of such attacks in the future an early stage service called CertWatch has been published by our Community: certwatch.xmpp.net/

fosstodon.org/@xmpp/1113033952…

XSF: XMPP Standards Foundation

2023-10-26 21:17:10


#XSF Announcement

Recently there was an incident via a so called #man_in_the_middle attack happened to an #XMPP #server.

To reduce the risk of such attacks in the future an early stage service called CertWatch has been published by our Community: certwatch.xmpp.net/

Many thanks to Stephen P. Weber (@singpolyma)!

Read two related blog posts:
blog.jmp.chat/b/certwatch/cert…

snikket.org/blog/on-the-jabber…

#Jabber #mitm #security #vulnerability #machine_in_the_middle #chat

CertWatch Logo

On the jabber.ru MITM attack

Reports of a possible recent interception of the public XMPP service jabber.ru have raised a lot of questions for people about how the attack happened, and whether it could affect them too. We have some answers.
snikket.org

⇧