For those who haven’t been following Juliano Rizzo and Thai Duong, two researchers who developed the BEAST attack against TLS 1.0/SSL 3.0 in September 2011, they have developed another attack they plan to publish at the Ekoparty conference in Argentina later this month – this time giving them the ability to hijack HTTPS sessions – and this has started people worrying again.
Security Stack Exchange member Kyle Rozendo asked this question:
And the community expectation was that we wouldn’t get an answer until Rizzo and Duong presented their attack. …