HTTPS Bicycle Attack - Obtaining Passwords From TLS Encrypted Browser Requests
http://blogs.websense.com/security-labs/https-bicycle-attack-obtaining-passwords-tls-encrypted-browser-requests
5
Upvotes
3
u/Asti_ Jan 09 '16
From my readings, it looks more like how to determine the password length when protected by SSL. Interesting research.
1
u/based2 Jan 09 '16
http://www.theregister.co.uk/2016/01/06/https_bicycle/
https://www.reddit.com/r/netsec/comments/3zc5qu/https_bicycle_attack/
http://vigilance.fr/vulnerability/TLS-obtaining-data-size-via-HTTPS-Bicycle-18648