Now, let's talk about sition hijacking and men in the middle attack when you are connected to the Internet.
Your computer has a lot of small back and front transaction with servers around the world, letting
them know who you are and what type of specific websites or service you are requesting for in return.
If everything goes as it should, the Web server should respond to your request by giving you the information
you are accessing.
This process or recession happens whether you are simply browsing or when you are logging into a website
with your username and password.
Dushan, between your computer and the remote web server is given a unique schneid which should stay
private between the two parties.
However, an attacker can hijack a decision by capturing the schneid and posing as the computer, making
a request which allows them to log in as an unsuspecting user and gain access to unauthorized information
on the Web server.
There are no number of matter and attacker can use to steal discretion.
ID, for example, Crossette scripting attack can also be used to hijack an I.D. and attacker can also
opt to hijack discretion to insert themselves between the requesting computer and the remote server
by pretending to be the other party in this.
This allows them to encrypt information in what direction this matter is commonly called.
As a man in the middle attack, a man in the middle attack is a gender term for when an attacker positions
himself in a conversation between a user and application by making it appear as if a normal exchange
of information is under way.
The goal of an attack is to steal personal information such as login credentials, a candidate and credit
card numbers, etc..
Targets are typically the users of financial application sites, businesses, e-commerce sites and other
websites where logging in is required.
Information obtained during an attack could be used for many purposes, including identity theft, unapproved
phone transfer or an illicit password change.
Broadly speaking, a man in the Middle East equivalent of a mailman opening your bank statement, writing
down your account details and then reselling the envelope and delivering it to your door.
There are some practical tips to prevent the man in the middle attack, such as a wider Wi-Fi connection
that are not password protected.
The next one is log out immediately from a secure application when it is not in use.
The third one is not to use public networks such as coffee shop and hotel by white when conducting sensitive
transactions, etc..
Let's better understand why this image in a successful man in the middle of a tech user of one's computer
thinks it is talking to users, computer and user does.
Computer thinks it is talking to users computer.
But the network traffic is diverted by a attacker.
So whatever the information transfer between user one and user two is passed through the attackers computer
system.