There are a few more details in the threatpost article: http://threatpost.com/en_us/blogs/new-attack-uses-ssltls-information-leak-hijack-https-sessions-090512

There are a few more details in the threatpost article: http://threatpost.com/en_us/blogs/new-attack-uses-ssltls-information-leak-hijack-https-sessions-090512 http://threatpost.com/en_us/blogs/new-attack-uses-ssltls-inf... But I haven't found any information on mitigation measures.