Re:Security researchers 'destroy' Microsoft ASP.NET security
by wglb on Friday September 17, 2010 @10:58PM
(#1703592)
Check out the quote that the authors of the paper in question note:
The most significant new discovery is an universal Padding Oracle affecting every ASP.NET web application. In short, you can decrypt cookies, view states, form authentication tickets, membership password, user data, and anything else encrypted using the framework's API!
The most significant new discovery is an universal Padding Oracle affecting every ASP.NET web application. In short, you can decrypt cookies, view states, form authentication tickets, membership password, user data, and anything else encrypted using the framework's API!