Home Forums Hunting & Shooting Hunter's Campfire Hey--TLS? What the heck?

At work we recently had a deal where we needed to prove to our alpha testers that we could do a thing by establishing something that, in a black-hat scenario, would be a man-in-the-middle attack: proxy their HTTP traffic through a server of ours and modify it on the way. In a black-hat scenario, that modification would be something nefarious; in our demonstration, we just added JavaScript to the response to put a branded frame around it on their screen. Since one of the express purposes of TLS is to prevent man-in-the-middle attacks, we needed our alpha testers to use only http:// sites to demonstrate this capability, not https:// sites. (The capability we were demonstrating wasn't the proxying, it was a certain kind of routing; we were just using the proxy to prove we had done the routing. After the demonstration, we threw away the proxy.)

So we were looking for http:// sites to recommend to our testers. (There aren't that many out there anymore.) I said, "Hey--use the 24-Hour Campfire! It's been insecure for decades; I doubt they'll ever secure that thing."

Ten minutes later a coworker called me over.

"What was that URL again?" he asked.

I looked, and omigosh: the 24-Hour Campfire finally has a certificate and a TLS layer! Just then, a pig flew past and told me that Hell had frozen over.

So we used http://nyan-cat.com and http://nicetightash.com instead.

So...good job, Rick Bin! I apologize for underestimating you. What made the change?

IIRC - I believe it has something to do with hosting pictures - the big change photobucket went through etc.

Huh. I guess that one got past me. Thanks for the info.

How dare you underestimate Mr. Rick Bin??????????????

Shame is your middle name!

Nice to see someone discuss software QA on this forum. I am glad I am not the only one who deals with it although I am in the test automation side of it. UFT and Selenium are my tools of the trade.

Totally!

True.

True.

I spend so much of my life looking for decent Agile QA folks. Somebody who when I say "exploratory testing" doesn't say, "What? Oh--you mean this?" and punches up a 300-page spreadsheet full of human-readable instructions.