HTTPS is vulnerable to BREACH exploit

Chat about just about anything else

HTTPS is vulnerable to BREACH exploit

Postby mmix on Sat Aug 03, 2013 10:51 am

http://vr-zone.com/articles/https-is-vu ... 49263.html

According to the CERT (Computer Emergency Readiness Team), there is not an easy solution for the BREACH HTTPS vulnerability which was showcased on Thursday at the Black Hat security conference in Las Vegas.

The BREACH vulnerability was demonstrated on Thursday at the Black Hat security conference in Las Vegas. Its existence comes as sour news at this time, especially after Facebook’s culmination of two year’s effort to protect all of its users using HTTPS, and the increasingly depressing news about the government’s habits of spying on Internet users.
mmix
Level 2
Level 2
 
Posts: 60
Joined: Tue Oct 09, 2012 11:02 am

Linux Mint is funded by ads and donations.
 

Re: HTTPS is vulnerable to BREACH exploit

Postby daveinuk on Sat Aug 03, 2013 11:54 am

There's an awful lot to be said for not turning into a cashless society . . . . . . .. no-one's breaching my wallet ......... :|
Lenovo ThinkPad T61 LM16-64 bit Intel T7500/2.2GHz/Cinammon 1.8 Intel GM965. Toshiba Satellite M70: LM16-32bit. Desktop:LM13 Maya 64 bit, on new Intel 3.2ghz proc/asus MB/8gb RAM
User avatar
daveinuk
Level 5
Level 5
 
Posts: 866
Joined: Tue Mar 23, 2010 7:52 pm
Location: Manchester, England.

Re: HTTPS is vulnerable to BREACH exploit

Postby KBD47 on Sat Aug 03, 2013 1:20 pm

The words "Security" "Privacy" and "Internet" no longer fit into the same sentence it seems. I can't help but think the long term chilling effect for the Internet regarding all these issues could devastate Internet commerce, free and open discussion, sharing of ideas and views, all of which helped to make the Internet great :(
KBD47
Level 5
Level 5
 
Posts: 956
Joined: Fri Jul 29, 2011 12:03 am


Re: HTTPS is vulnerable to BREACH exploit

Postby dee. on Sat Sep 14, 2013 7:03 pm

Good reason to support Bitcoin. No need to depend on https for bank transfers...
dee.
Level 4
Level 4
 
Posts: 239
Joined: Sun Jan 20, 2013 6:29 pm

Re: HTTPS is vulnerable to BREACH exploit

Postby linuxviolin on Sun Sep 15, 2013 12:46 pm

About what the first poster gives, I am not convinced of the generality of this approach. Not too practical, I am sure.

And about the Hakers News Bulletin article given by Gotsu Totsu Kotsu II above, it is still not too practical. There are systems that block access for a time after a number of failed attempts.
K.I.S.S. ===> "Keep It Simple, Stupid"
"Simplicity is the ultimate sophistication." (Leonardo da Vinci)
"Everything should be made as simple as possible, but no simpler." (Albert Einstein)
User avatar
linuxviolin
Level 8
Level 8
 
Posts: 2055
Joined: Tue Feb 27, 2007 6:55 pm
Location: France


Return to Open chat

Who is online

Users browsing this forum: No registered users and 4 guests