You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The web service used to consume sensor readings from subject 126 (species: Zebra) is communciated with over an insecure interface and lacks authentication. Erroneous sensor readings could be sent to this end point to manipulate the public into killingsubject 126.
The service client should be amended to use mutual TLS authentication. At a minimum digital signatures should be leveraged to prevent misuse of the service.
The text was updated successfully, but these errors were encountered:
mmaguigan
changed the title
Save the Plant - A man in the middle attack.
Save the Plant - Unauthenticated Web Service
Oct 12, 2017
The web service used to consume sensor readings from
subject 126
(species: Zebra) is communciated with over an insecure interface and lacks authentication. Erroneous sensor readings could be sent to this end point to manipulate the public into killingsubject 126
.The service client should be amended to use
mutual TLS authentication
. At a minimum digital signatures should be leveraged to prevent misuse of the service.The text was updated successfully, but these errors were encountered: