Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Dratsab

3964 posts

Uber Geek
+1 received by user: 1728

Trusted
Lifetime subscriber

#115732 4-Apr-2013 19:49
Send private message

Been getting a strange problem when visiting Geekzone for the last 2 days. No login and passwords fields:




Running W7 (fully up-to-date) - happens on both Chrome and IE10. Anyone else been seeing this?

Create new topic
freitasm
BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41030

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #793445 4-Apr-2013 19:57
Send private message

Someone noticed it, then.

This is a change we've done yesterday to improve password security.

Although the previous form submitted the login information to a SSL page, a man-in-the-middle attack (a transparent proxy at an ISP, wireless hotspot or even corporate) could easily add javascript code to read the fields when clicked, before being submitted to the SSL form.

To login now you click the button labelled [Click to login] and that will give you the SSL-enabled login page, which cannot be modified by a MITM attack.




Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.