“中间人”可以更改中间人攻击中发送的值数据
如果我从 A 向 B 发送信息，“中间人”可以更改发送的值数据还是他/她只能嗅探它？
If I send from A to B an information, the "Man in the middle" can change the value data sent or he/she can only sniff it?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
答案取决于所涉及的技术。
1 如果您不采取任何措施来防止中间人攻击，那么中间人既可以嗅探并更改您的数据。如果你查找 arp 欺骗，你会发现一种非常简单的中间人攻击方式 - 并且你会找到自动化工作的工具。
2 您可以使用 TLS 等加密协议，旨在防止嗅探和更改数据。但是，如果您使用损坏的实现、损坏的协议或较弱的算法，您将回到 #1
3 您可以使用仅提供嗅探或更改数据的加密技术。例如，数字签名有效地保证数据没有改变，但签名没有任何作用来保护数据不被读取。类似地，一次性密码本将无法读取您的数据，但无法防止盲目篡改（自动柜员机有一个老问题，可以翻转随机位来更改存款的价值，希望使其大于您实际存入的金额）
the answer depends upon the technologies involved.
1 if you do nothing to prevent the mitm attack, the man in the middle can both sniff and change your data. if you look up arp spoofing, you'll see a very simple way to play mitm - and you'll find tool sthat automate the work.
2 you can use crypto protocols like TLS, designed to prevent both sniffing and changingof data. if, however, you use a broken implementation, broken protocol, or weak algorithms, you're back to #1
3 you can use crypto that will provide only sniffing or changing data. for example, digital signatures effectively garuantee that the data hasn't changed, but the signature does nothing to protect the data from being read. similarly, a one time pad will make it impossible to read your data, but won't prevent blind tampering (there was an old problem with automatic teller machines, where it was possible to flip random bits to change the value of a deposit, hoping to make it larger tthan what you really deposited)