News for hackers. Stuff that matters.
Re:New attack plucks secrets from HTTPS-protected pages by seldo on Thursday August 01, 2013 @01:10PM (#6141775)
The attack builds on the CRIME attack, which is discussed in more technical detail here:

http://zoompf.com/2012/09/explaining-the-crime-weakness-in-s...

That page suggests that guessing known text like an SSN or email address contained in the body would give them an opening to break the encryption entirely, but I don't know enough about crypto to know if that's actually a possibility.

There are no comments on this comment yet.