12

So my brother went back to school today. Now, during the 5 years I was there they had the most shit security on their IT systems, but aparently now they have fucked up their ssl. If you try to load the https page it comes up with the warning saying its an invalid certificate, but once you click it, it doesn't even load the school website, it loads this random page. Clicking on the buttons then take you to a page under their domain provided by another school. Going to this schools website, the https seems to be broken in the exact same way. It wouldnt be so bad, but it can confuse the hell out of people who type https before a url, and thos who dont realise and end up on the insecure site will need to provide passwords over an insecure connection. I am so glad im out of that place, they had such crap IT and everything was so easy to break.

Comments
  • 1
    Ah yes, SSL.. something for which my Bettercap-ng experiment at home, harvesting my own credentials from their insecure shit login page to show them that they should fix this (after I got explicit permission from nutzwerking/sakurity "teacher" to do it), actually got me in trouble with their so-called "IT chaps", because I allegedly "hacked their servers". Yep, IT colleges are a joke.
Add Comment