- 6,066
- 1,531
- Joined
- Apr 4, 2012
"Why that’s bad: very, very sensitive data often sits in a server’s system memory, including the keys it uses to encrypt and decrypt communication (read: usernames, passwords, credit cards, etc.) This means an attacker could quite feasibly get a server to spit out its secret keys, allowing them to read to any communication that they intercept like it wasn’t encrypted it all. Armed with those keys, an attacker could also impersonate an otherwise secure site/server in a way that would fool many of your browser’s built-in security checks."what does this means?
http://techcrunch.com/2014/04/07/ma...sl-could-effect-a-huge-chunk-of-the-internet/
Basically a hacker could get the keys used to encrypt and decrypt passwords etc. Therefore letting them read any encrypted data sent (passwords, etc). They can also impersonate a server and steal your data there.
Last edited:
use @jjs136
