Man-In-the-Middle Vulnerability For SSL and TLS

imbaczek writes "The SSL 3.0+ and TLS 1.0+ protocols are vulnerable to a set of related attacks which allow a man-in-the-middle (MITM) operating at or below the TCP layer to inject a chosen plaintext prefix into the encrypted data stream, often without detection by either end of the connection. This is possible because an 'authentication gap' exists during the renegotiation process, at which the MitM may splice together disparate TLS connections in a completely standards-compliant way. This represents a serious security defect for many or all protocols which run on top of TLS, including HTTPS."

We need to invest in Quantum Physics.

[jellomizer]

Only with quantum physics can we actually get a secure data transfer. Or not or both.

web developers

[chrisranjana.com]

So are these man in middle exploits fixed in the latest Ubuntu release ?

Re:We need to invest in Quantum Physics.

[PiSkyHi]

Come on moderators, its a joke - Yes, I realise its both funny and not funny at the same time.

Re:We need to invest in Quantum Physics.

[Anonymous Coward]

Most of the mods here wouldn't get an intelligent joke if it came up and kicked them in the face.

It'd have to kick them in the nuts to be low-brow enough for them to notice.

Its a quantum man in the middle attack

[Viol8]

Its the same man in all 3 places.

Re:We need to invest in Quantum Physics.

[mcgrew]

Damn you, Quantum Physics!! [angryflower.com]