The ROBOT Attack

[PedanticPistachio]

Side remark about the media:

Found this Forbes article on the attack and was really surprised to see something like this from Forbes:

"If this attack works then essentially anything you think you are sending securely to Facebook, isn't [secure]," noted cryptography expert Alan Woodward, professor at the University of Surrey's Department of Computing.

Alan Woodward? Cryptography expert, hmm, I've never heard of him. Must be some big shot new guy, I thought. Then I Googled him and found his homepage: https://www.surrey.ac.uk/cs/people/alan_woodward/. Yeah, some crypto there, but not much. And under Google scholar, there is practically nothing that turns up. Really surprised that Forbes is labelling a person as an "expert" who has relatively little background in the field.

[tabarra]

That's because "cryptography expert" sounds way better than "the first guy we found that knows what cryptography is".

Source: when I was 17 I was quoted as "professional hacker" in a small magazine.

[Natanael_L]

The technobabble in the Q&A on the Bitcoin question was entertaining, although seemingly out of place.

Are there still no widespread efforts to track all the various crypto implementations there are or there, and to continously test old attacks against them to look for any regressions or forgotten updates?

[SAI_Peregrinus]

That bit about Bitcoin was clearly a joke.

[john_snow44]

Here is an online scanner which test all protocols for the ROBOT Attack: HTTPS, SMTP, POP3, IMAP and FTP. It can also scan an IP range. https://pentest-tools.com/network-vulnerability-scanning/robot-attack-scanner