What is Poodle Vulnerability?
Google researchers have discovered a security vulnerability in SSL 3.0 that allows attackers to decrypt encrypted website connections. The details is in here.
However, some security experts disagree that the bug is particularly serious and they think that it only affect the public wifi.
How to exploit it?
Daniel Fox Franke wrote in his blog to explain how to exploit the vulnerability.
How to test the browsers vulnerability?
Qualys provides a tester online for the browsers testing. Or, you can try another tester online.
How to test the server vulnerability?
Qualys provides server test online for the server testing.
How to fix the browsers vulnerability?
There is a tutorial to show you how to fix them.
How to fix the common servers vulnerability?
There is a tutorial to show to you how to fix the vulnerability on common servers.
That's all! See you.
Open Source is a great idea and it has changed the world!
Open Source forever ....
While you do not know attack, how can you know about defense? (未知攻,焉知防?)
Do BAD things .... for the RIGHT reasons -- OWASP ZAP
It is easier to port a shell than a shell script. -- Larry Wall
Most of you are familiar with the virtues of a programmer. There are three, of course: laziness, impatience, and hubris. -- Larry Wall
为天地立心, 为生民立命, 为往圣继绝学, 为万世开太平。 -- 王炜
Showing posts with label SSLv3. Show all posts
Showing posts with label SSLv3. Show all posts
Thursday, October 16, 2014
Subscribe to:
Posts (Atom)
