Top

Tag: ssl


Cybersecurity

1998 attack that messes with sites’ secret crypto keys is back in a big way

December 13, 2017

Via: ArsTechnica

A surprisingly big number of top-name websites—Facebook and PayPal among them—recently tested positive for a critical, 19-year-old vulnerability that allowed attackers to decrypt encrypted data and sign communications using the sites’ secret encryption key. The vulnerability in the transport layer […]


Cybersecurity

Firefox ready to block certificate authority that threatened Web security

September 28, 2016

Via: ArsTechnica

The organization that develops Firefox has recommended the browser block digital credentials issued by a China-based certificate authority for 12 months after discovering it cut corners that undermine the entire transport layer security system that encrypts and authenticates websites. The […]


Uncategorized

HTTPS-crippling attack threatens tens of thousands of Web and mail servers

May 20, 2015

Via: Dan Goodin

Tens of thousands of HTTPS-protected websites, mail servers, and other widely used Internet services are vulnerable to a new attack that lets eavesdroppers read and modify data passing through encrypted connections, a team of computer scientists has found. The vulnerability […]


Uncategorized

1,500 iOS apps have HTTPS-crippling bug. Is one of them on your device?

April 20, 2015

Via: Dan Goodin

  About 1,500 iPhone and iPad apps contain an HTTPS-crippling vulnerability that makes it easy for attackers to intercept encrypted passwords, bank-account numbers, and other highly sensitive information, according to research released Monday. An estimated two million people have installed […]