How was bitcointalk attacked in Dec 2013? There was a man-in-the-middle attack on bitcointalk on Dec 2013.


  News: If you used your password to login between 06:00 Dec 1 UTC and
  20:00 UTC, then your password may have been captured in a
  man-in-the-middle attack, and you should change your password here and
  wherever else you used it. If you were only logged in via the
  "remember me" feature, then you're OK.


How was this executed? Didn't bitcointalk use SSL? Are there technical details on the attack vector?
The general description has been given before me.Here are technical details on the attack vector.

Assuming the following:


The attacker got a certificate that the client will accept, via poor cert validation or other means.
The attacker knows the IP address of the server, and is in a position on the network to do things like ARP spoofing.


Ettercap includes modules for ARP, DNS and DHCP "interventions", and supports direct SSL MITM