Researchers: Password crack could affect millions

JRViejo · Jul 15, 2010

A well-known cryptographic attack could be used by hackers to log into Web applications used by millions of users, according to two security experts who plan to discuss the issue at an upcoming security conference.

Researchers Nate Lawson and Taylor Nelson say they've discovered a basic security flaw that affects dozens of open-source software libraries -- including those used by software that implements the OAuth and OpenID standards -- that are used to check passwords and user names when people log into websites. OAuth and OpenID authentication are accepted by popular Web sites such as Twitter and Digg.

They found that some versions of these login systems are vulnerable to what's known as a timing attack. Cryptographers have known about timing attacks for 25 years, but they are generally thought to be very hard to pull off over a network. The researchers aim to show that's not the case.
Click to expand...

Computerworld Article by Robert McMillan.

Log in or Sign up

Researchers: Password crack could affect millions

JRViejo Super Moderator

Log in or Sign up

Researchers: Password crack could affect millions

JRViejo Super Moderator

Useful Searches