je.st
news
Tag: openssl
New OpenSSL flaw could leave some Android users open to decryption attack
2014-06-05 19:29:16| Wireless - Topix.net
While not as severe as April's heart-stopping Heartbleed vulnerability, this flaw could for example allow people operating fake Wi-Fi hotspots to intercept, decrypt and manipulate supposedly secure traffic being passed between a user and a web service.
Heartbleed-Weary Tech Firms Show OpenSSL a Little Love
2014-05-30 23:29:50| TechNewsWorld
Remember Heartbleed? Several weeks ago, the exposure of this security bug chilled the Internet, highlighting once again that even the seemingly unbreakable can be hacked. In the case of the Heartbleed vulnerability, encrypted data was at risk of theft. Sites potentially vulnerable to Heartbleed -- from Canada's Revenue Agency to AWS to Yahoo to Reddit -- urged users to change their passwords.
Hacker claim about bug in fixed OpenSSL likely a scam
2014-04-28 13:48:18| InfoWorld: Top News
Security experts have expressed doubts about a hacker claim that there's a new vulnerability in the patched version of OpenSSL, the widely used cryptographic library repaired in early April. A group of five hackers writes in a posting on Pastebin that they worked for two weeks to find the bug and developed code to exploit it. They've offered the code for the price of 2.5 bitcoins, around $870.
The Exploitation of OpenSSL
2014-04-26 19:52:53| TechNewsWorld
The Web has been abuzz with discussion of the HeartBleed flaw. Security vendors and experts have been falling all over themselves to offer advice on detecting or mitigating the flaw, and consultants have been offering businesses advice on how to deal with the problem. The NSA has been accused of having known about -- and exploited -- the vulnerability.
Tags: exploitation
openssl
Akamai admits its OpenSSL patch was faulty, reissues keys
2014-04-14 13:45:35| InfoWorld: Top News
Akamai Technologies, whose network handles up to 30 percent of all Internet traffic, said Sunday a researcher found a fault in custom code that the company thought shielded most of its customers from the Heartbleed bug. As a result, Akamai is now reissuing all SSL (Secure Sockets Layer) certificates and security keys used to create encrypted connections between its customer's websites and visitors to those sites.
Tags: keys
patch
admits
faulty