“Nine weeks after Moxie Marlinspike presented at Defcon 17, null-prefix certificates that exploit the SSL certificate vulnerability are beginning to appear. Yesterday, someone posted a null-prefix certificate for www.paypal.com on the full-disclosure mailing list. In conjunction with sslsniff, this certificate can be used to intercept communication to PayPal from all clients using the Windows Crypto [...]

via @lowkey

Distributed for peer review last week, the study confounded infectious-disease experts in suggesting that people vaccinated against seasonal flu are twice as likely to catch swine flu. via Study prompts provinces to rethink flu plan – The Globe and Mail.

via @puffs