Nuke's

“The potential for attack is pretty severe.”

Heard at the Vegas Black Hat conference

Demonstrated at the Black Hat hacker conference in Las Vegas, the tools make it far easier to steal account details, said Robert Graham of Errata Security.

Identifying files called cookies are stolen in the attack which let hackers pose as their victim.

This gives attackers access to mail mesages or the page someone maintains on sites such as MySpace or Facebook

Prior to the demonstration, which involved the live hijacking of a Google mail account (GMail), many sites were thought to be safe because they encrypted the data swapped back and forth when people login.

However, Mr Graham carried out his attack on the unencrypted cookies, tiny text files, many sites use to identify people that regularly return.

Source: news.bbc.co.uk

Tags: access | account | attack | carried | Cookies | data | demonstrated | ENCRYPTED | Errata | facebook | files | forth | gives | Google | Graham | hacker | Hijack | identify | involved | Las Vegas | login | mail | maintains | mesages | MySpace | prior | regularly | Robert | Security | sites | swapped | TEXT | Tools | unencrypted | Warning | webmail | Wi-Fi

Filed under: Homeland Security, Now Public, Technology or Software, Web 2.0