Author Topic: Secure web browsing cracked by "BEAST"  (Read 503 times)

0 Members and 1 Guest are viewing this topic.

Offline ky331

  • Dell Community Colleague
  • Dell Support Group
  • Bronze Member
  • Posts: 284
  • Rascal & Biscuit
Secure web browsing cracked by "BEAST"
« on: September 24, 2011, 10:17:23 am »
"A pair of researchers have unveiled a serious new attack on web browser security... a new tool [called BEAST] that attacks TLS and SSL, the cryptographic protocols used to establish secure web connections.

The ability to crack encrypted web traffic removes the safety net that protects you when you're doing sensitive online tasks like banking or using credit cards...

Right now the attack can take up to half an hour to execute
."

Full article (by Mark Stockley)  http://nakedsecurity.sophos.com/2011/09/24/secure-web-browsing-cracked-by-beast/?utm_source=facebook&utm_medium=status+message&utm_campaign=naked+security

-----------------

Addendum [from http://en.wikipedia.org/wiki/Transport_Layer_Security#Browser_implementations ]

Mozilla Firefox, versions 2 and above, support TLS 1.0 [the protocol now under attack].   As of September 2011, Firefox does not support TLS 1.1 or 1.2.

Internet Explorer 8 in Windows 7 (and Windows Server 2008 R2) supports [the newer/safe] TLS 1.2.  [It seems that IE8 under Win XP only supports TLS 1.0]

As of Presto 2.2, featured in Opera 10, Opera supports TLS 1.2. 
       




Offline ky331

  • Dell Community Colleague
  • Dell Support Group
  • Bronze Member
  • Posts: 284
  • Rascal & Biscuit
Re: Secure web browsing cracked by "BEAST"
« Reply #1 on: September 28, 2011, 05:38:51 am »
Microsoft has issued an advisory, including some work-arounds for Windows 7 (and for Vista):

http://technet.microsoft.com/en-us/security/advisory/2588513


Offline faith_michele

  • Anti - Phishing Staff
  • Gold Member
  • Posts: 1947
    • A Beacon of Light
Re: Secure web browsing cracked by "BEAST"
« Reply #2 on: October 01, 2011, 07:39:36 am »
Thanks! :)1
Microsoft Consumer Security MVP, July 2007-June 2010

"Fight your fights, find the grace in all the things that you can't change and help somebody, if you can." Van Zant

A Beacon of Light