Cyber Risks · Krebs on Security

“Free” Proxies Aren’t Necessarily Free

Summary: Austrian researcher Christian Haschek tested 443 open Web proxies and found that 79 percent forced users to load pages in unencrypted http:// mode, letting proxy owners see all traffic in plain text. Slightly more than 16 percent of the proxies actively modified static HTML pages to inject ads.

Key Takeaway: Haschek's own framing is the stake: a proxy operator who insists on http-only can analyze your traffic and steal your logins, and users routing through these services are handing that position to an unknown third party.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related