BS. The BEAST attack requires first injecting JS into the browser which in turns requires being man-in-the-middle. After that all bets are off and there are eas

BS. The BEAST attack requires first injecting JS into the browser which in turns requires being man-in-the-middle. After that all bets are off and there are easier ways to hack the system. Moreover, the only known solution on the server side - downgrading to RC4 (TLS 1.1+ is not supported on majority of the browsers). The cure is worse than the decease.