Tags: crypto ssl
Please, do not write just a link to original writeup here.
Task was total shit. NOTHING indicated the mentioned bug. If we at least got a PCAP or anything, to see that CCS is sent early, but no. And releasing a hint right before end of the competition was a total dick move.