3 ms·
Hopely Cyanogenmod devs, if not Google itself, will fix it, now that they are aware. In 2010 it may not be seen as a priority, but since last June it is for eve
by gmuslera 13y ago
Hopely Cyanogenmod devs, if not Google itself, will fix it, now that they are aware. In 2010 it may not be seen as a priority, but since last June it is for everyone.
- dbmnt 13y agoCyanogenMod merged a "fix" into the repo earlier today: http://review.cyanogenmod.org/#/c/51771/ http://review.cyanogenmod.org/#/c/51771/ ... only to revert it later: http://review.cyanogenmod.org/#/c/51794/ http://review.cyanogenmod.org/#/c/51794/ The revert noted "TLS v1.0 + AES is a bad combo, and entirely possible to happen with these priority lists". In other words, the proposed "quick fix" was dangerous. There's some reading material on BEAST attacks here: https://blogs.akamai.com/2012/05/what-you-need-to-know-about-beast.html https://blogs.akamai.com/2012/05/what-you-need-to-know-about...