CAs and other stuff

[wurst]

later this week, researchers Thai Duong and Juliano Rizzo plan to demonstrate proof-of-concept code called BEAST, which is short for Browser Exploit Against SSL/TLS.

btw http://ekoparty.org/cronograma.php seem not to really respond.
ah and there (later this week) u can dl BEAST internetbanking wallhack http://netifera.com/

later this week im gona sew u all and impress ur girlfriends with my money.

[BEH]

Thanks, feelin the love.

[wurst]

hihi.
btw. why dont we use ssl here @ dswp homepage?

[SKracht]

hm yes i sometimes thought a https://www.dswp.de would be nice.

but with TLS >1.0 ^^

[eXtr33m]

hm yes i sometimes thought a https://www.dswp.de would be nice.

but with TLS >1.0 ^^

Yeah just give me another browser that supports it
I hate Chicken-and-egg .. bloody hell

[SKracht]

Code: Select all

Yngve Nysæter Pettersen (2009-02-25). "New in Opera Presto 2.2: TLS 1.2 Support". http://my.opera.com/core/blog/2009/02/25/new-in-opera-presto-2-2-tls-1-2-support. Retrieved 2009-02-25.

i must admit i'm not using opera and i dont plan to do so, hm

[wurst]

opera ftw!

[SKracht]

Tor and the BEAST SSL attack
good abstract, its worth reading it, the part about a hypothetical TOR attack isn't so interesting without being deeply into its infrastructure and code.
in retrospect its so logical how they use the predictable IV to break it, quite imaginative smartasses =D