Pope BEAST I

Encyclical

"Crustulum Raptum". Thai Duong and Juliano Rizzo turned a years-old theoretical weakness in CBC initialisation vectors into live HTTPS cookie theft, demonstrated on stage at Ekoparty. Browsers answered with 1/n-1 record splitting, and the world finally began moving to TLS 1.1 and 1.2. Lesson: a "purely theoretical" attack is just an attack nobody has written yet.

Saint page: Saint BEAST

Cardinals

Hash-collision DoS (HashDoS, n.runs at 28C3) · Win32k TrueType font parsing zero-day (Duqu)