Researchers from security firm Imperva have devised new techniques that could allow attackers to extract sensitive information from users’ encrypted Web traffic. The new methods build on those used in an attack called CRIME that abuses the compression feature of SSL to achieve the same goal. CRIME can be used to recover secret information from encrypted responses, information that can be something valuable like credit card numbers or personal details. The Imperva researchers dubbed the new attack TIME, which stands for “Timing Info-leak Made Easy,” and will present it at the Black Hat Europe 2013 security conference in Amsterdam.”]

