Get a Pentest and security assessment of your IT network.

News

Ivan Risti: CRIME: Information leakage attack against SSL

Juliano and Thai present their most recent attack against crypto system. CRIME: Information leakage attack against SSL/TLS. The root cause of the problem is information leakage that occurs when data is compressed prior to encryption. In practice, the attack works best against session cookies. The only browser to properly support TLS compression is Chrome and Firefox. Unlike BEAST, CRIME seems much easier to exploit; we will see a tool soon, maybe as a fork of sslstrip in the current version.”]

Source: https://blog.ivanristic.com/2012/09/crime-information-leakage-attack-against-ssl-tls.html

Related posts
News

Ashley Madison 2.0 Hackers Leak 20GB Data Dump, Including CEO's Emails

News

Art of Twitter account hacking

News

Take note, next week update Adobe Reader and Acrobat to fix critical flaws

News

Linux bug leaves 1.4 billion Android users vulnerable to hijacking attacks