freakattack.com

blog.avuln.com

My home is my castle… or no longer?

http://blog.avuln.com/article/2

My home is my castle or no longer? My home is my castle or no longer? On Thursday, 12 March 2015. Is associated with safe and quiet place. Seems like soon it can be changed. Published an article about possible vulnerabilities in Nest Thermostat. Vulnerability looks unexploitable in practice because physical access to the device is required. However, it is easy to imagine some distributor’s employee or a serviceman getting access to your device and then getting control of it. And do it very successful.

charit0819.wordpress.com

FREAK Attack | Charit Mishra-OSCP | CEH | Security+ |CCNA R&S

https://charit0819.wordpress.com/2015/03/05/freak-attack

Charit Mishra-OSCP CEH Security CCNA R&S. Career in Cyber Security. Skills You Need to Succeed in Cyber security. March 5, 2015. Factoring RSA Export Keys. The FREAK attack was originally discovered by Karthikeyan Bhargavan. At INRIA in Paris and the mitLS team. Among the various state machine problems researcher’s found, one is particularly interesting because it leads to a server impersonation exploits against several mainstream browsers (including Safari and OpenSSL-based browsers on Android). You are...

smoothwall.blogspot.com

The Smoothwall Blog: March 2015

http://smoothwall.blogspot.com/2015_03_01_archive.html

We all work in the internet security industry, and as such we're involved with a wide range of technologies, markets and people. Our collective blog is a space for our insights, observations and interests. NB The opinions expressed here are those of the individual authors, and not those of Smoothwall ltd or Smoothwall inc.). Tuesday, March 31, 2015. Pukka Firewall Lessons from Jamie Oliver. 8221; Before going home that evening, maybe there’s a question about the latest eatery in town. Our food obsession,...

tools.keycdn.com

KeyCDN - SSL FREAK Test - Vulnerability CVE-2015-0204

https://tools.keycdn.com/freak

SSL FREAK Test CVE-2015-0204. Is your webserver attackable? A free SSL vulnerability checker against the FREAK attack. You can specify a custom port like this. What is the FREAK SSL attack? Tuesday 2015/03/03 - Researchers of miTLS team (joint project between Inria and Microsoft Research) disclosed a new SSL/TLS vulnerability the FREAK SSL attack ( CVE-2015-0204. Read more about the FREAK SSL attack. How to eliminate the vulnerability? Upgrade the OpenSSL version to at least.

ishige-jp.com

よろずな小道具屋

https://www.ishige-jp.com/index.php?cmd=qhmauth

CGI ウェブサーバがヘッダ Proxy の値を環境変数 HTTP PROXY に設定する脆弱性. 公開日 2016/07/19 最終更新日 2016/07/20. この脆弱性は、環境変数HTTP PROXYを参照してHTTPアウトバウンド通信を行う WebサーバやWebアプリケーションに存在し、 Apache HTTP Server CVE-2016-5387 Apache Tomcat CVE-2016-5388 HHVM CVE-2016-1000109 PHP CVE-2016-5385 Python CVE-2016-1000110 が影響を受けることが確認されている。 Nginx with proxy pass. 細工されたリクエストを脆弱なサーバに送信することで、遠隔の第三者が内部のサブリクエストに対する中間者攻撃 (man-in-the-middle attack) を行ったり、サーバから任意のホストに接続させたりする可能性があります。 NTPorg の ntpd にサービス運用妨害 (DoS) など複数の脆弱性. 公開日 2016/06/03 最終更新日 2016/06/06.

cybersure.blogspot.com

Cybersense: March 2015

http://cybersure.blogspot.com/2015_03_01_archive.html

Whether you're dealing with a computer crash, a choice about a mobile device, a problem with your connection or jargon of technical support, Cybersense is your gateway into the high-tech world. Scammers, hackers, and identity thieves are all looking to steal your personal information and your money too. Protect yourself. Tuesday, March 24, 2015. Three Things You Can Do When You Are Bored. Install the update manually. Swipe in from the right edge of the screen, tap Settings, and then tap Change PC settings.

en.wikipedia.org

Transport Layer Security - Wikipedia, the free encyclopedia

https://en.wikipedia.org/wiki/Secure_Sockets_Layer

From Wikipedia, the free encyclopedia. Redirected from Secure Sockets Layer. And its predecessor, Secure Sockets Layer. Both frequently referred to as "SSL", are cryptographic protocols. That provide communications security. Over a computer network. Several versions of the protocols find widespread use in applications such as web browsing. Use TLS to secure all communications between their servers. The connection is private. Is used to encrypt the data transmitted. The keys. The identity of the communica...