Omphalos: Difference between revisions
→Layer 5: add reference to SSL BEAST |
|||
| Line 396: | Line 396: | ||
* Cryptographic downgrade attacks on HTTPS etc | * Cryptographic downgrade attacks on HTTPS etc | ||
===Layer 5=== | ===Layer 5=== | ||
* FireSheep-like session hijacking | * FireSheep- and BEAST-like session hijacking | ||
* Progressive user identity/demographic discovery aka "maximum creepy" (heuristics on machine name, web pages visited, accounts revealed, mails sent etc) | * Progressive user identity/demographic discovery aka "maximum creepy" (heuristics on machine name, web pages visited, accounts revealed, mails sent etc) | ||
** Watch for and aggregate probed wireless networks, DHCP lease renewals, etc | ** Watch for and aggregate probed wireless networks, DHCP lease renewals, etc | ||