On Fri, 2013-04-19 at 06:18 -0700, Lisa Kachold wrote: +AD4 If you take that Ubuntu install to DefCon and connect to the network +AD4 there, every place you connect with/to authenticate to/with will be +AD4 endangered. All of the sites you visit irregardless of protocol +AD4 (encryption) will provide login/password and URL to others listening +AD4 and MITM'ing. So you're assuming SSL is decrypted or the certificate authority is compromised? URL for sure, but I'm unsure how you could be saying login/password would be automatically available. Ted