World Bulletin / News Desk
A hacking expert has launched a $200 password-cracking tool that makes it easy to decipher Internet traffic sent through a widely used method for securing businesses communications.
Moxie Marlinspike, one of the world's top encryption experts, unveiled the tool on Saturday during a presentation at the Def Con hacking conference in Las Vegas.
Marlinspike said he developed the service, CloudCracker.com, by taking advantage of a vulnerability he discovered in a widely used virtual private network technology known as point-to-point tunneling protocol.
Virtual private networks, or VPNs, scramble traffic as it travels between a PC and its final destination so that the data is useless to hackers if they eavesdrop on those communications.
But Marlinspike provides clients with a tool that analyzes captured data streams and creates a data file that they upload to his website. He then runs that through code-cracking computer programs that figure out a password that will unscramble the protected communications. He delivers that to clients within 24 hours.
With access to web traffic, hackers could potentially steal passwords to financial accounts, read business emails and learn business secrets.
Marlinspike said he will not screen clients to determine whether they are using CloudCracker for illegal purposes, although his ultimate intent is help computer users by pressuring operating systems makers to make their software safer.
"What we're trying to do is force people to use more secure VPN technology in the products they are building," he said.
Marlinspike said that small to mid-sized businesses and consumers typically use VPN software with the point-to-point tunneling protocol.
Large corporations typically supply their employees with VPN software from Cisco Systems Inc, whose communications cannot be cracked by CloudCracker.com, he said.
Marlinspike has worked for Twitter since the end of last year when the mobile blogging service acquired a company he co-founded, Whisper Systems. Marlinspike said that CloudCracker.com was a personal project and has nothing to do with Twitter.
Hackers and security experts present research on a wide range of vulnerabilities in products ranging from computers and networking equipment to locks, drones and air-traffic control systems at the annual Def Con gathering.
They often publicize their work in an effort to warn the public about security risks and pressure manufacturers to address the problems.
Spanish news publishers want government to negotiate with Google.
The Russian space station Mir, launched by the Soviet Union in 1986, operated until 2001 and President Vladimir Putin is now seeking to reform Russia's once-pioneering space industry
Google's action caps a decade of acrimony with news publishers who blame the search giant for revenue and readership declines
Top climate envoy gives broad support for global deal but says country's "special circumstances" must be factored.
Finnish cyber-security expert tells Istanbul audience that people have made gigantic IT companies billions in profits by providing private data for services.
The scientific observation of Pluto, its entourage of moons and other bodies in the solar system's frozen backyard begins Jan. 15
For the first time in more than 40 years, NASA has launched a spaceship designed to carry astronauts far beyond Earth
Benefits of digital revolution outweigh risks, Germany’s Chancellor says
Last month, Prime Minister Ahmet Davutoglu vowed to make climate change a top priority when Turkey hosts next year’s G20 summit
The emails of Apple’s late CEO is being used as evidence in antitrust claim.
The report said the malware overrides data on hard drives of computers and can make them inoperable and shut down networks.
Among those hit were the London newspapers Daily Telegraph, Independent and Evening Standard, which reported that other news organisations had also been targeted.
The European Union's privacy watchdogs agreed on a set of guidelines to help them implement a ruling from Europe's supreme court that gives people the right to ask search engines to remove personal information
Iraq bars private companies from owning fixed networks transiting domestic data and anything they build is usually seized by the government.
The new crew faces a busy six months in orbit, including a trio of spacewalks to prepare the station for a new fleet of U.S. commercial space taxis