Advanced

LinkedIn DNS hijacked, traffic rerouted for an hour, and users’ cookies read in plain text

Posted by caitlyn on · Post a comment
Venture Beat /Security; By John Koetsier
Mail this story
Print this story

App.net cofounder Bryan Berg noticed that LinkedIn was DNS-hijacked tonight and that traffic was rerouted to a shady India-based site, http://www.confluence-networks.com. That’s bad for LinkedIn, but there’s worse news for you. According to Berg, that site does not require SSL (secure sockets layer), which means that anyone who visited in the last hour or so sent it their long-lived session cookies in plain text … a potential security risk.

Full Story

  Nav
» Read more about: Story Type: News Story, Security

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments

No comments yet. Be the first.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post