Ep 3: DigiNotar, You are the Weakest Link, Good Bye!
Source: YouTube · Jack Rhysider · published Nov 29, 2017 · 25:08
The video reveals how a vigilant Gmail user in Iran uncovered a sophisticated man-in-the-middle attack targeting users, prompting major tech companies to release emergency security patches 0:00-0:48.
Key Takeaways:
• An Iranian user discovered suspicious Gmail access issues, receiving "Invalid Server Certificate" warnings when trying to access the site 0:07
• The user could only access Gmail through a VPN, suggesting deliberate interference with the connection 0:14
• The user reported suspicions of a man-in-the-middle attack, potentially conducted by his ISP or the Iranian government 0:21
• Google responded with a security warning and emergency Chrome patch, followed quickly by similar updates from Mozilla, Microsoft, and Apple 0:32
• The incident was confirmed as an actual man-in-the-middle attack that undermined Gmail's security infrastructure 0:48
This incident demonstrates how individual vigilance can uncover major security threats and prompt rapid responses from tech companies to protect users worldwide.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
JACK: A guy in Iran goes to check his e-mail.
He types in gmail.com into his browser and hits enter. A strange warning pops up. It says Invalid
Server Certificate. He’s unable to get to Gmail. He connects to a VPN and tries again. Through the
VPN he connects just fine. He thinks there may be some funny business going on. He posts a question
to the Google forums asking if there’s a possible man-in-the-middle attack going on. He also says
he suspects his ISP or the Iranian government to be doing something fishy. Google responded
not only to the forum post but they published a security warning to the world and released an
emergency patch to their Chrome browser. Mozilla, Microsoft, and Apple followed quickly
with similar security updates. There was, in fact, a man-in-the-middle attack…