March 23rd, 2010, 09:51 PM
Search Engines Leak?
Google, Yahoo, Microsoft's Bing, and other leading websites are leaking medical histories, family income, search queries, and massive amounts of other sensitive data that can be intercepted even when encrypted, computer scientists revealed in a new research paper.
Interesting article here:
Researchers from Indiana University and Microsoft itself were able to infer the sensitive data by analyzing the distinct size and other attributes of each exchange between a user and the website she was interacting with. Using man-in-the-middle attacks, they could glean the information even when transactions were encrypted using the Secure Sockets Layer, or SSL, protocol or the WPA, or Wi-fi Protected Access protocol.
If you cannot do someone any good: don't do them any harm....
As long as you did this to one of these, the least of my little ones............you did it unto Me.
What profiteth a man if he gains the entire World at the expense of his immortal soul?
March 24th, 2010, 07:22 AM
Purdy scary stuff...
The threat is significant because it stems from fundamental characteristics of software-as-a-service applications that have been in vogue for about a decade.
Patterns...I love patterns
Effective and efficient mitigations have to be application-specific: developers will need to identify the vulnerabilities first, and then specify mitigation policies accordingly," the researchers wrote. "This effort requires analysis of web application semantics, information flow and network traffic patterns."
How people treat you is their karma- how you react is yours-Wayne Dyer
By scratchONtheBOX in forum Other Tutorials Forum
Last Post: March 30th, 2005, 04:53 PM
By d00dz Attackin in forum Other Tutorials Forum
Last Post: November 20th, 2004, 10:49 AM
By Unleashed in forum Miscellaneous Security Discussions
Last Post: April 8th, 2002, 02:35 PM
By jared_c in forum The Security Tutorials Forum
Last Post: March 11th, 2002, 02:47 PM
By Remote_Access_ in forum Non-Security Archives
Last Post: November 29th, 2001, 04:56 AM