Search the Community

SLOTH attack targets old hash functions Researchers from the Prosecco team at INRIA published a number of attacks that exploit the use of weak hash functions in TLS and other protocols. They called their attack SLOTH (Security Losses from Obsolete and Truncated Transcript Hashes). The most severe attack is affecting the systems that use of client certificates and continue to support RSA-MD5 signatures. It’s been known since 2005 that MD5 hash collisions are easy to carry out. Many practitioners have argued in the past that the hash collisions don’t matter in certain scenarios and that the security of many protocols only relies on the so-called second preimage resistance. The INRIA researchers debunked many of these claims with their new publication. The most notable scenario where an attack is possible is when client certificates are used. If a user authenticates himself at a malicious server using a client that supports RSA-MD5 signatures, then the server can use the information provided to impersonate the user on some other target server (which must also support RSA-MD5). A surprising aspect of this is that TLS 1.2 is vulnerable to this attack while prior versions are not. The reason for this is that TLS 1.2 allows negotiation of the signature algorithm (prior versions always use a concatenation of MD5 and SHA1) and, crucially, still supports the insecure MD5 as an option. This is very surprising given the fact that TLS 1.2 was published in 2008—several years after practical attacks against MD5 were announced. This attack is made worse by the fact that various implementations accept RSA-MD5 signatures even if they advertise that they don’t do this. Several cryptographic libraries have received updates in response to this research, including NSS, GnuTLS, BouncyCastle and mbedTLS. An old version of OpenSSL (before 1.0.1f) was also affected.

http://www.liveleak.com/view?i=9e8_1444455082 (media tags don't work with LiveLeak, sorry)

Hello everyone, I'm not sure if you have heard that Verizon (VZW) has been, for the past two years, inserting a perma-cookie into HTTP traffic headers via means of a UIDH. The UIDH ignores: private browsing, do not track, even Verizon's own opt-outs. I have assembled some links below to provide you some more information regarding this issue. AFAIK, AirVPN users are safe from VZW tracking. You are also safe on sites that use HTTPS. According to some comments in the various articles (links to articles below), it appears at least AT&T is doing the same thing as VZW. Reddit: /r/Privacy Verizon & ATT injecting UIDH Verizon adding UIDs: Hacker News Wired: Verizon's Perma Cookie kills privacy DSLreports: Verizon Perma Cookie WebPolicy: Verizon Tracking Header LessonsLearned: Test for Cellular tracking Beacons (must be on cellular network) This issue highlights the need for net neutrality and encryption! anonym