<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: SSL exploit turn Firefox into malware distributor</title>
	<atom:link href="http://www.digitalsociety.org/2009/07/ssl-certificate-exploit-turn-firefox-into-malware-distributor/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.digitalsociety.org/2009/07/ssl-certificate-exploit-turn-firefox-into-malware-distributor/?utm_source=rss&amp;utm_medium=rss&amp;utm_campaign=ssl-certificate-exploit-turn-firefox-into-malware-distributor</link>
	<description>Pro-Culture, Pro-Commerce</description>
	<lastBuildDate>Fri, 10 Sep 2010 15:06:57 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
	<item>
		<title>By: Digital Society &#187; Blog Archive &#187; Secure notification method needed for infected ISP customers</title>
		<link>http://www.digitalsociety.org/2009/07/ssl-certificate-exploit-turn-firefox-into-malware-distributor/comment-page-1/#comment-1119</link>
		<dc:creator>Digital Society &#187; Blog Archive &#187; Secure notification method needed for infected ISP customers</dc:creator>
		<pubDate>Mon, 12 Oct 2009 13:40:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.digitalsociety.org/?p=69#comment-1119</guid>
		<description>[...]  [...]</description>
		<content:encoded><![CDATA[<p>[...]  [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mozilla patches SSL, Microsoft CryptoAPI still exposed &#124; Technology for Mortals</title>
		<link>http://www.digitalsociety.org/2009/07/ssl-certificate-exploit-turn-firefox-into-malware-distributor/comment-page-1/#comment-175</link>
		<dc:creator>Mozilla patches SSL, Microsoft CryptoAPI still exposed &#124; Technology for Mortals</dc:creator>
		<pubDate>Wed, 05 Aug 2009 21:21:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.digitalsociety.org/?p=69#comment-175</guid>
		<description>[...]  [...]</description>
		<content:encoded><![CDATA[<p>[...]  [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Digital Society &#187; Blog Archive &#187; Mozilla patches critical Firefox flaw</title>
		<link>http://www.digitalsociety.org/2009/07/ssl-certificate-exploit-turn-firefox-into-malware-distributor/comment-page-1/#comment-173</link>
		<dc:creator>Digital Society &#187; Blog Archive &#187; Mozilla patches critical Firefox flaw</dc:creator>
		<pubDate>Wed, 05 Aug 2009 21:12:17 +0000</pubDate>
		<guid isPermaLink="false">http://www.digitalsociety.org/?p=69#comment-173</guid>
		<description>[...]  [...]</description>
		<content:encoded><![CDATA[<p>[...]  [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: George Ou</title>
		<link>http://www.digitalsociety.org/2009/07/ssl-certificate-exploit-turn-firefox-into-malware-distributor/comment-page-1/#comment-171</link>
		<dc:creator>George Ou</dc:creator>
		<pubDate>Wed, 05 Aug 2009 19:58:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.digitalsociety.org/?p=69#comment-171</guid>
		<description>Jonny, the vulnerability allows attackers pose AS the Firefox update server.  So as soon as you connect to a rogue wireless network or a valid wired network that has been hijacked through an ARP spoof, you get owned as soon as you launch Firefox.

Mozilla has released a patch for Firefox so you should upgrade immediately if you run Firefox.</description>
		<content:encoded><![CDATA[<p>Jonny, the vulnerability allows attackers pose AS the Firefox update server.  So as soon as you connect to a rogue wireless network or a valid wired network that has been hijacked through an ARP spoof, you get owned as soon as you launch Firefox.</p>
<p>Mozilla has released a patch for Firefox so you should upgrade immediately if you run Firefox.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jonny SMith</title>
		<link>http://www.digitalsociety.org/2009/07/ssl-certificate-exploit-turn-firefox-into-malware-distributor/comment-page-1/#comment-30</link>
		<dc:creator>Jonny SMith</dc:creator>
		<pubDate>Mon, 03 Aug 2009 09:48:25 +0000</pubDate>
		<guid isPermaLink="false">http://www.digitalsociety.org/?p=69#comment-30</guid>
		<description>From what i understand the idee is that somebody can send malware files using firefox update server (correct me if i m wrong).
I looked into this and i found some info from sites that have subject malware issues (ex malwarecity.com)  and the ideea is for my antivirus bitdefender it say&#039;s that it doesn t protect the user for sofware vulnerabilities but it keeps  you safe by catching the malware file that the firefox server is sending by update .
I m safe and i wait for the firefox guy s to resolve the issue .</description>
		<content:encoded><![CDATA[<p>From what i understand the idee is that somebody can send malware files using firefox update server (correct me if i m wrong).<br />
I looked into this and i found some info from sites that have subject malware issues (ex malwarecity.com)  and the ideea is for my antivirus bitdefender it say&#8217;s that it doesn t protect the user for sofware vulnerabilities but it keeps  you safe by catching the malware file that the firefox server is sending by update .<br />
I m safe and i wait for the firefox guy s to resolve the issue .</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Daily Digs &#8211; 07.30.2009 &#171; Security Stallions Blog</title>
		<link>http://www.digitalsociety.org/2009/07/ssl-certificate-exploit-turn-firefox-into-malware-distributor/comment-page-1/#comment-9</link>
		<dc:creator>Daily Digs &#8211; 07.30.2009 &#171; Security Stallions Blog</dc:creator>
		<pubDate>Fri, 31 Jul 2009 00:13:11 +0000</pubDate>
		<guid isPermaLink="false">http://www.digitalsociety.org/?p=69#comment-9</guid>
		<description>[...]  [...]</description>
		<content:encoded><![CDATA[<p>[...]  [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: SSL exploit turns Firefox into malware distributor &#124; Technology for Mortals</title>
		<link>http://www.digitalsociety.org/2009/07/ssl-certificate-exploit-turn-firefox-into-malware-distributor/comment-page-1/#comment-6</link>
		<dc:creator>SSL exploit turns Firefox into malware distributor &#124; Technology for Mortals</dc:creator>
		<pubDate>Thu, 30 Jul 2009 15:46:47 +0000</pubDate>
		<guid isPermaLink="false">http://www.digitalsociety.org/?p=69#comment-6</guid>
		<description>[...]  [...]</description>
		<content:encoded><![CDATA[<p>[...]  [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
