New attack steals SSNs, e-mail addresses, and more from HTTPS pages
http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/
The exploit is notable because it doesn't require a
man-in-the-middle position. Instead, an end user need only
encounter an innocuous-looking JavaScript file hidden in an
Web advertisement or hosted directly on a webpage. The
malicious code can then query a variety of pages protected by
the secure sockets layer or transport layer security protocols
and measure the precise file sizes of the encrypted data they
transmit. As its name suggests, the HEIST technique--short for
HTTP Encrypted Information can be Stolen Through
TCP-Windows--works by exploiting the way HTTPS responses are
delivered over the transmission control protocol, one of the
Internet's most basic building blocks. Once attackers know
the size of an encrypted response, they are free to use one of
two previously devised exploits to ferret out the plaintext
contained inside it. Both the BREACH and the CRIME exploits
are able to decrypt payloads by manipulating the file
compression that sites use to make pages load more quickly.
HEIST will be demonstrated for the first time on Wednesday at
the Black Hat security conference in Las Vegas.
- - -
--Lauren--
Lauren Weinstein ([email protected]): https://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: https://www.nnsquad.org
- PRIVACY Forum: https://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: https://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: https://lauren.vortex.com
Google+: https://google.com/+LaurenWeinstein
Twitter: https://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
https://lists.pfir.org/mailman/listinfo/pfir
