Hacker News Reader

When I worked on Wall Street all of our Desktops literally had the USB ports ripped out. I'm really surprised the military doesn't do something like this...

View on HN

I've seen them epoxyed all to hell as well.

Weren't you connected to the internet?

What would stop you from connecting to Gmail (HTTPS) and emailing something to yourself?

Extensive proxying? MITM? There's no reason they wouldn't put their own root certificate onto the machines. For most work on Wall Street one probably doesn't even need to be connected to the internet.

It's scary the number of people who think that HTTPS guarantees an end-to-end secure channel between your browser and the remote application.

Well, it does if you control the machine you're using. Or am I missing something?

AFAIK if someone else controls the machine you are on (or can get certs installed by one way or another) which can be combined with a MITM proxy to get access to the unencrypted content.

However, a lot people use machines they don't control where this kind of approach is perfectly feasible.

blocking connections to gmail works ok. Of course, that doesn't prevent you printing stuff out...

Reply on news.ycombinator.com