Found a Python PoC: http://s3.jspenguin.org/ssltest.py
Edit: and just used it to dump 64K from a known-vulnerable device we control. Got a session cookie. Jeez.
Edit: and just used it to dump 64K from a known-vulnerable device we control. Got a session cookie. Jeez.
This shit is scary.