.

Hi,

This is the sesson notes in pdf-format for everybody who attended:
11SIA 338 - Passwords_and_Authentication_The_Good_The_Bad_and_The_really_ugly_Marcus_Murray.pdf (1,24 mb)

I hope you liked the session, it repeats on Thursday, 5PM in Auditorium A

This is a demo of Cookie Stealing google docs that was presented at Teched US 2010.

Scenario: Someone is logging on to Google Docs over a wireless network or a network segment that can be sniffed by a hacker. [Like the open Wireless network @ TechED ;)]
Attack:  The cookies are sniffed and user by the hacker to access the target Google Doc account.

Stay safe, use SSL and examine the certificate of the server!

/Marcus Murray @ Truesec