Case Studies Flashcards

(4 cards)

1
Q

British Airways Hack

A

The Magecart Group injected malicious code into a payment processing form on a BA website, the code scraped a users card information and sent it to an API meant to look as if it was owned by BA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Newegg Hack

A

The Magecart group injected code into the payment form for Newegg to steal users card information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

zk-SNARK and Zcash

A

zk-SNARK - zero-knowledge succint non-interactive argument of knowledge
Zcash - modern cryptocurrency

A Zcash developer spotted a fatal flaw in a zk-SNARK implementation where the creation log allowed one to compute the master secret

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Heartbleed

A

A serious vunerability in the OpenSSL cryptography lib.
It allows for stealing information they under normal condition is protected by SSL/TLS.
Allowed anyone on the internet to read the memory of the systems protected by the vunerable version of the OpenSSL software. Compromising the secret keys used to identify service providers and encrypt traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly