Activists just got another reason to worry about what could be learned about them, after the revelation that traffic “fingerprints” can tell an attacker what’s going on, even if an application includes encryption.
Researchers from the Universities of Padua and Rome have found that activities such as posting to Facebook , browsing a social network, or sending an e-mail do not require decryption of encrypted data.
The researchers point out that even in the hands of an experienced user, there are opportunities for "willing malicious adversaries to track people ... the adversary can still collect a significant amount of information from properly encoded traffic.".
📧
Subscribe to the SecNews Newsletter
