#1 CSRF Is A Vulnerability In All Browsers

#1

Post by homakov » Fri, Mar 30, 2012, 9:25 PM UTC

First article that makes the point.

#1 CSRF Is A Vulnerability In All Browsers
homakov.blogspot.com

Re: #1 CSRF Is A Vulnerability In All Browsers

#2

Post by akavlie » Fri, Mar 30, 2012, 9:31 PM UTC

For those who didn't see the recent kerfuffle: This guy recently found and demonstrated a major Rails exploit on github. He seems to know a thing or two about security exploits.

Re: #1 CSRF Is A Vulnerability In All Browsers

#3

Post by jorgem » Fri, Mar 30, 2012, 9:36 PM UTC

"April fools day" will not be a good day for him to publish "secret stuff".

Re: #1 CSRF Is A Vulnerability In All Browsers

#4

Post by elisee » Fri, Mar 30, 2012, 9:36 PM UTC

Just in case it might be a problem for anyone: The article uses the CSRF vulnerability to log you out of all Google services (and says so in a PS at the bottom).

Don't open the article if you don't want to have to log in to Google again afterwards (might be a problem if you're using two-factor auth and you don't have your phone handy for instance).

Re: #1 CSRF Is A Vulnerability In All Browsers

#5

Post by rosser » Fri, Mar 30, 2012, 9:36 PM UTC

akavlie wrote: post #2

For those who didn't see the recent kerfuffle: This guy recently found and demonstrated a major Rails exploit on github. He seems to know a thing or two about security exploits.

Clarification: he didn't recently find the exploit. He's been making noises about it for a very long time and being ignored, so he took the (dubious, to some) step of using the exploit publicly and loudly, to draw attention to the problem.

Re: #1 CSRF Is A Vulnerability In All Browsers

#6

Post by homakov » Fri, Mar 30, 2012, 9:37 PM UTC

akavlie wrote: post #2

For those who didn't see the recent kerfuffle: This guy recently found and demonstrated a major Rails exploit on github. He seems to know a thing or two about security exploits.

I'd not say so. All new - well forgotten old.

Re: #1 CSRF Is A Vulnerability In All Browsers

#7

Post by homakov » Fri, Mar 30, 2012, 9:37 PM UTC

jorgem wrote: post #3

"April fools day" will not be a good day for him to publish "secret stuff".

why? seems perfect.

Re: #1 CSRF Is A Vulnerability In All Browsers

#8

Post by homakov » Fri, Mar 30, 2012, 9:38 PM UTC

elisee wrote: post #4

Just in case it might be a problem for anyone: The article uses the CSRF vulnerability to log you out of all Google services (and says so in a PS at the bottom). Don't open the article if you don't want to have to log in to Google again afterwards (might be a problem if you're using two-factor auth and you don't have your phone handy for instance).

hm yep. should I hide that thing? hm.. Sorry guys in advance.

Re: #1 CSRF Is A Vulnerability In All Browsers

#9

Post by hanbam » Fri, Mar 30, 2012, 9:38 PM UTC

elisee wrote: post #4

Just in case it might be a problem for anyone: The article uses the CSRF vulnerability to log you out of all Google services (and says so in a PS at the bottom). Don't open the article if you don't want to have to log in to Google again afterwards (might be a problem if you're using two-factor auth and you don't have your phone handy for instance).

Looks that Google detects the type of logout and doesn't ask for two-factor authentication in this case.

Re: #1 CSRF Is A Vulnerability In All Browsers

#10

Post by spamizbad » Fri, Mar 30, 2012, 9:39 PM UTC

I'm having a little trouble parsing this post. Is he saying he's discovered a variant of CSRF that cannot be stopped by using the Synchronizer Token Pattern? Or has he found something that a lot of site's protection patterns don't follow?