New transparent proxy abuse discovered

Mar 11, 2009, 15:33 (0 Talkback[s])

[ Thanks to Robert for this link. ]

"Abstract

"Transparent proxies allow organizations to influence and monitor the traffic from its users without their knowledge or participation. Transparent proxies act as intermediaries between a user and end destination, and aren't generally apparent to users sitting behind them. Enterprises, Hotels, and Internet Service Providers often use transparent proxy products to lower bandwidth consumption,speed up page loads for their users, and for monitoring and filtering of web surfing. When certain transparent proxy architectures are in use an attacker can achieve a partial Same Origin Policy Bypass resulting in access to any host reachable by the proxy via the use of client plug-in technologies (such as Flash, Applets, etc) with socket capabilities."

Complete Story

Related Stories:

• Three Easy Steps to Set-up Anonymous Web Browsing on Linux(Mar 09, 2009)
• Web Content Filtering with OpenDNS(Mar 03, 2009)
• Warning! Linux Security. Are You at Risk?(Jan 26, 2009)
• OpenSSH: The Poor Man's SOCKS Proxy(Jan 22, 2009)
• How to Use SSH Via HTTP Proxy Using Corkscrew in Ubuntu(Dec 30, 2008)