Researchers Devise New Attack Techniques Against SSL

alphadogg writes "The developers of many SSL libraries are releasing patches for a vulnerability that could potentially be exploited to recover plaintext information, such as browser authentication cookies, from encrypted communications.The patching effort follows the discovery of new ways to attack SSL, TLS and DTLS implementations that use cipher-block-chaining (CBC) mode encryption. The new attack methods were developed by researchers at the University of London's Royal Holloway College. The men published a research paper and a website on Monday with detailed information about their new attacks, which they have dubbed the Lucky Thirteen. They've worked with several TLS library vendors, as well as the TLS Working Group of the IETF, to fix the issue."

Comments

On the internet, nothing is private

[For a Free Internet]

Deal with it like I do: never use the internet. Have your assistant or secretary do all internet-related tasks for you. THat way, you will never be on the internet or the Facebook, and you will be safe from virusing and spywars. Also, remember to eat healthy and love your neighbor like youself, even if your neighbor is a creepy weirdo who smells funny and doesn't seem to have a regular job and who leaves weird junk in his front yard, even if your neighbor is like that, love him or her at least as much as you can because Obama loves you.