Amazon Silk Browser Ignored SSL Searches
Fails to protect your privacy
Amazon's Silk internet browser contained a serious bug which not only ignored SSL security standards in Google searches but prevented redirection to the secure version of the search engine. The Google Chrome-based Silk browser, loaded with Amazon Kindle tablets, was set up without Secure Sockets Layer (SSL) technology -- which encrypts communication between servers and web browsers -- and also prevented automatic redirections to Google's SSL version of the tech giant's search engine.
This security problem left user connections unencrypted and potentially open to man-in-the-middle (MitM) attacks and snooping.
On
Monday, Nightwatch Security revealed its findings in a public security
disclosure. The company's security team said the browser, which allows
users to choose between Google, Bing, and Yahoo for search results, does
not connect using SSL if Google is selected.
Comments
Be the first to write a comment
You must me logged in to write a comment.