[4096]

The blog post with all the technical details: http://blog.fox-it.com/2015/04/20/deep-dive-into-quantum-ins...

And the Github account with the tools to do this yourself, PCAP and rules for snort, bro and suricata: https://github.com/fox-it/quantuminsert

[smellf]

Thanks for the technical link. You gotta love Wired, paraphrasing down to get gems like: “The first TCP packet will be the ‘inserted’ one while the other is from the real server, but will be ignored by the [browser]”.

Oh my browser deals with TCP packets??