Feeds

Firesheep hack catches out Mr Demi Moore

aplusk minus for security

Internet Security Threat Report 2014

Ashton Kutcher's Twitter profile was hacked on Wedesday to spout pro-SSL graffiti.

Instead of the usual updates of the life of Mr Demi Moore, the aplusk account regaled its 6.4 million followers with security warnings, such as the one below.

Ashton, you've been Punk'd. This account is not secure. Dude, where's my SSL?

The actor was attending the TED awards (the tech world's equivalent of the Oscars at the time). The most likely explanation for the mischievous hack is that Kutcher made a Twitter or Firefox update using an open wireless connection at the show.

This, in turn, allowed someone to capture his login credentials before posting messages in his name, probably using a tool called Firesheep.

Firesheep neatly illustrates a well-known risk that previously had received little mainstream attention. Both Twitter and Facebook as well as browser developers are moving towards mandating logins through more secure SSL links, but this process is taking time, presumably prompting aplusk's high-profile hacker to push the message out a bit further – a harmless celebrity hack.

Alternatively Kutcher himself may have simulated the hack to try and make a point about Web 2.0 security.

More on the prank (if that's what it is) can be found in a blog post by net security firm Sophos here. ®

Beginner's guide to SSL certificates

Whitepapers

Driving business with continuous operational intelligence
Introducing an innovative approach offered by ExtraHop for producing continuous operational intelligence.
Why CIOs should rethink endpoint data protection in the age of mobility
Assessing trends in data protection, specifically with respect to mobile devices, BYOD, and remote employees.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Mitigating web security risk with SSL certificates
Web-based systems are essential tools for running business processes and delivering services to customers.