Section: Dissemination

Vulnerability Reports

• R. Bardou and G. Steel (and their co-authors) found a series of vulnerabilities in cryptographic devices, resulting in a research paper and significant press coverage.

• K. Bhargavan and C. Bansal reported single sign-on vulnerabilities in Facebook, Yahoo, Helios and ConfiChair. These vulnerabilities were fixed on their recommendations, and the Prosecco team name was given credit on their websites.

• K. Bhargavan and A. Delignat-Lavaud reported encryption-related vulnerabilities in several commercial software packages, including 1Password, Roboform, LastPass, SpiderOak, and Wuala. These vulnerabilites were fixed on their recommendations and the Prosecco team was given credit on their websites.

• K. Bhargavan reported a CSP-related security vulnerability in Firefox, resulting in a security update.

• A. Delignat Lavaud reported a iframes-related security vulnerability in Firefox, resulting in a security update.