Computer Services in NUIG transparent proxy tracking all HTTP(S) activity

[Paul Mac Eoin]

I'm not even entirely sure what that means. I know it has the potential for "man in the middle" attacks

More details are available here http://www.boards.ie/vbulletin/showthread.php?p=80687777

Can someone clarify if it is still safe to carry out secure things like online banking/shopping? Pretend I have no faith in the competency nor security of Computer Services.

Thanks!

[gerryk]

They can break the server SSL connection at the proxy and instantiate a new new one from the proxy to your pc. Since they control DNS and the HTTP stream, they can ostensibly claim that the proxy is the server you are connecting to.
They can only do this if they control the client PC as well as the proxy, as they would need to install the relevant root CA cert in your browser, otherwise it will complain, since they are using self-signed certs for this.

[gerryk]

I would consider it unsafe to conduct anything you need to remain private.

On Sep 9, 2012 9:44 PM, "Paul Mac Eoin" <paul.m...@gmail.com> wrote:

[Alanna Kelly]

I would not be doing anything which required security on one of those machines.

[Domhnall Walsh]

Seconded (or since Gerry has said the same, thirded). Also, try the Certificate Patrol plugin for Firefox (fresh install, maybe in a VM) and after browsing to a bunch of HTTPS-heavy sites (e.g. online banking) on a known good connection (say, your home internet) and then try the same on the NUI Galway network and see what certificates it flags. 

Also have the HTTPS Everywhere extension installed to force Firefox's hand as necessary.

(Note: Certificate Patrol will drive you nuts during everyday use, but it rocks for stuff like this) 

[Barry Coughlan]

The cert chain for the IT department computers (treated separate to the rest of the college) doesn't seem to contain anything phishy.

[Aaron Hastings]

Yep, the IT Department ones seem fine. We checked them the other day.