News for hackers. Stuff that matters.

A comment on Crack in Internet's foundation of trust allows HTTPS session hijacking. Parent comment

Re:Crack in Internet's foundation of trust allows HTTPS sess... by pilif on Thursday September 13, 2012 @01:43PM (#4517538)
> This seems to be a very basic attack, wondering why this attack vector wasn't publicly known much earlier...

in hindsight everything looks very basic. If this was so simple, why didn't you come up with it?

[ Parent | on HN ]
Re:Crack in Internet's foundation of trust allows HTTPS sess... by tptacek on Thursday September 13, 2012 @04:09PM (#4518299)
Maybe "basic" isn't the word I would use, but I thought the same thing. This is one of those vulnerabilities that is completely obvious... in retrospect.
[ Parent | on HN ]