Hacker News Reader

Comment by stygianguest | Hacker News Reader

But what to do with such a cache? Build a new search engine to compete with google? I sincerely hope they will do that, but it cannot be easy. That said, if you have the cache, you might as well try.

By the way, what about online banking etc. They are introducing yet another weak point by playing the middle man.

View on HN

Quote: "All communication between the Opera Mini servers and the Opera Mini client on your phone is encrypted?" Source: http://my.opera.com/haavard/blog/2010/04/15/public-wifi

So basically, as long as Opera's security is ok, we are ok. However, if someone manages to find a hole, we might be screwed. But, how practical is it to launch an attack on a mobile webbrowser that is possibly using encrypted WiFi along with a encrypted communication channel? May be someone else can shed more light on this.

Your ISP can act as a MITM and they can even poison DNS requests.

Other than that, governments can corrupt the certificate-issuing authorities and present you with forged SSL credentials.

http://www.eff.org/deeplinks/2010/03/researchers-reveal-like...

They don't play MITM to https sites for the Turbo feature in Opera Mobile or Desktop. No idea what they do for Opera Mini.

Opera Mini is required to MITM by its design; it can't render HTML, only OPML fed to it by Opera's servers. I don't know what exactly the security implications are.

Not to confuse OPML (Outline Processor Markup Language), used to aggregate RSS files with OBML (Opera Binary Markup Language).

I was confused why or how OPML would serve Opera's purposes in this instance.

Sorry about that -- I was wrongly convinced the Opera technology was called OPML, too. I was a little bit surprised by lack of Opera-centric results when googling it...

Yeah, the best I can come up with is that you have to trust them that the data never makes it to the disk. But then they don't seem to be disk caching anything at all.

Reply on news.ycombinator.com