Gone in 30 seconds: New attack plucks secrets from HTTPS-protected pages

http://arstechnica.com/security/2013/08/gone-in-30-seconds-new-attack-plucks-secrets-from-https-protected-pages/