I am certain it comes as no surprise to Samizdata readers that States are interested in penetrating your computers and stealing private communications without bothering about the legal niceties of search warrants issued by judges whom they do not own. But some things come as a surprise to even those of us who watch such things. I had not heard of this particular attack before. Spoofing, in conjunction with other attacks to pin down the real source while the spoofer gets in, have been around awhile. Some were dependant on analysis of the generated packet sequence numbers to allow a complete hijack.
None seem as practical as the web page substitution technique discussed in this Wired article. It is somewhat technical but useful reading if you want to keep up with what the enemies of liberty and rule of law are up to. Even more importantly, the article shows there are ways of keeping the bad guys out of your computers. The method may not be as satisfying as dropping a nuke on the SOB’s, but hey, you work with what you got.
