CookieMonster steals cookies with personal information

23rd September 2008

The programmer Mike Perry has found that protected HTTPS connections, used to get access to bank accounts and other services over the Internet, are not as safe, as they used to be thought.
Each time a user enters personal data to gain access to his account, the secret information in the form of a cookie-file is transferred via secure channel. But Perry found that site developers can not separate protected cookies elements from unprotected ones and, using fairly simple techniques, an attacker can deceive the browser and transfer cookies via a regular HTTP-connection. The application CookieMonster, written in Python, allows anyone willing to take advantage of the vulnerability found.
The developer of CookieMonster is planning to open broad access to his child in the near future.

Flash Player 10 eliminates problems in Firefox 3

EFI-X: installing Mac OS X to an ordinary PC

Featured

Daniusoft DVD to 3GP Converter

Daniusoft DVD to 3GP Converter is a powerful and easy-to-use DVD to 3GP video Converter software which can convert DVD to 3GP: ... Daniusoft DVD to Pocket PC Converter

Daniusoft DVD to Pocket PC Converter free download

Daniusoft DVD to Pocket PC Converter is a powerful and easy-to-use DVD to Pocket PC Ripper converter software which can co... Daniusoft DVD Audio Ripper

Daniusoft DVD Audio Ripper free download

Daniusoft DVD Audio Ripper is a powerful and easy-to-use DVD to MP3 Ripper and DVD audio extractor software which can rip DVD a... Daniusoft DVD to Zune Converter

Daniusoft DVD to Zune Converter free download

Daniusoft DVD to Zune Converter is a powerful and easy-to-use Rip DVD Movie to Zune Converter Software which could convert DVD ... Daniusoft Video Converter

Daniusoft Video Converter is a best video file Converter to convert videos among different Video Audio HD Video formats. This v...

Interact

Now downloading

ieStarGate

ieStarGate is an Internet Explorer toolbar that automatically displays, scrolls, and advances web pa...

Blog categories

News blog