4 ms·
I do not understand beyond "Open SSL is broken", but it sounds both terrible and important. Can someone please explain a bit more?
by geophile 10y ago
I do not understand beyond "Open SSL is broken", but it sounds both terrible and important. Can someone please explain a bit more?
- Nostromov 10y agoYeah, no. That might take several days. Check out some of the names mentioned in the textfile, such as the Heartbleed Bug and then some of the links, such as 'Damage control'. Besically, a patch to SSL authentication lead to moar craziness and somehow there's a debate whether the protocol is broken in itself. Well, not broken, but if like everything needs to be rewritten kinda. :) ^^ Referring to depreciating the way the auth chains are stacked... Ugh, "MAC-then-Encrypt" @http://web-in-security.blogspot.rs/2016/05/curious-padding-oracle-in-openssl-cve.html http://web-in-security.blogspot.rs/2016/05/curious-padding-o... Edit (looks like I can edit): Sorry, can't edit and it's 4AM losing my mind. There are things that have been exploited 3 years ago and then 1 year ago which are still very much implemented. I think that is the problem.
- deleted 10y ago[deleted]