Linux TCP flaw lets 'anyone' hijack Internet traffic

I understand this flaw also affects many Android devices as well. This is a pretty serious flaw since it's in the TCP stack, so a patch will have to be developed fairly soon.

A "workaround" would be to force the use of SSL or use a VPN, but even in these cases a hacker could try to force a reset. If you are on SSL or a VPN and keep getting resets, this would be a dead giveaway someone's trying to capture your traffic. You could SSL or VPN over Tor or GNUNet to make their life harder, but obviously the vulnerability needs prompt attention.

DR