There is a vulnerability in Windows systems that someone can forge SSL certificates like a site claimed to have SSL sertificate of Microsoft.com or any other site. Microsoft said that this vulnerability is in the operating system ( which is actually funny ) and they didnt give an exact time when they will release a fix . So this bug is real big and said to be existed for 2 years!

You got two chance :

1- Dont give personal info any https:// site you dont trust or know

2- Use mozilla ( www.mozilla.org ) as our open source browser is not vulnerable ( muhahhaha take that microsoft )

P.S : You can read more about this @

http://thewhir.com/marketwatch/ssl081402.cfm

http://online.securityfocus.com/news/582

http://www.computerworld.com/securitytopic...1,73507,00.html

http://slashdot.org/article.pl?sid=02/08/16/1725248

http://slashdot.org/article.pl?sid=02/08/1...1341239&tid=172







/cartman



Last edited by CARTMAN at Aug 17 2002, 07:53 AM