This project is not maintained anymore. You can still view and search the archives.

New attack steals SSNs, e-mail addresses, and more from HTTPS pages

Hi, I’m Anselm Hannemann, a freelance Frontend Developer and Engineering Manager. You can hire me. I wrote WDRL for 10 years and have a a Market Garden as a side-business.

This link appeared in WDRL 148 on 05.08.2016.

New attack steals SSNs, e-mail addresses, and more from HTTPS pages

Mathy Vanhoef and Tom Van Goethem presented a new HEIST-attack on HTTPS pages to steal SSNs, email addresses, and more. You can view the slides [pdf], or read the write-up [pdf] to understand the attack and what you can do to prevent it.