Hackers Break Browser SSL/TLS Encryption

First time accepted submitter CaVp writes with an article in The Register about an exploit that appears to affect all browsers and can decrypt an active TLS session. From the article: "Researchers have discovered a serious weakness in virtually all websites protected by the secure sockets layer protocol that allows attackers to silently decrypt data that's passing between a webserver and an end-user browser." A full disclosure is scheduled for Friday September 23rd at the Ekoparty conference. Note that this only affects SSL 2.0 and TLS 1.0; unfortunately, most web servers are misconfigured to still accept SSL 2.0, and TLS 1.1 and 1.2 have seen limited deployment. The practicality of the attack remains to be determined (for one, it isn't very fast — but if the intent is just to decrypt the data for later use, that isn't an impediment).

Ah ha!

[Howard Beale]

Now we know what that 30,000 node EC2 cluster was for...

Re:Javascript

[MachDelta]

No way man, this place is so much better with ja

Working...

v

Working...

ascr

Working...

ip

Working...

*Ctrl+W*

Working...

*Ctrl+WWWWWWWW*

Working...

*Alt+F4*