3 ms·
* No source whatsoever. * No information beyond what is in the (linkbaity) title. What's the purported scope? Is it implementation specific? What's the exposu
by yourad_io 12y ago
* No source whatsoever.
* No information beyond what is in the (linkbaity) title.
What's the purported scope? Is it implementation specific? What's the exposure? Session decryption? Memory leak? RCE?
> El Reg cannot confirm whether or not it is indeed a serious bug as we have not received details of the vuln.
Then what the hell are you reporting exactly?
[✓] Fear
[✓] Uncertainty
[✓] Doubt
Keep it classy, Register.
- laumars 12y agoTo be frank, this is typical reporting for the Register. The quality of it's reporting has been in a downwards spiral in recent months and I swear it's now little better than the Daily Mail (more technical, granted. But it's just as sensationalist)
- yourad_io 12y agoSpeculation time I went on a brief hunt for more information about this, and there seems to be a cluster of CVEs created 4 days ago around improper validation of X.509 certificates in android (and libgadu), allowing MitM. If this is it, it is nowhere near the severity of heartbleed. libgadu: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4488 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-448... many android apps: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6887 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-688... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6891 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-689... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6904 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-690... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6934 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6935 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6936 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6937 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6938 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6939 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6940 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-694... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6941 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-694... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7046 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-704... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7047 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-704...