Re: Serious bug in ubiquitous OpenSSL library: "Heartbleed"

2014-04-07 Thread Maxim Khitrov
It's bad. I decided to test my servers after updating them. Took me about 3 hours to write a working implementation of this attack without any prior knowledge of TLS internals. It's easy to do, pretty much impossible to detect, and it's going to spread quickly. Shut down your https sites and any ot

Re: Serious bug in ubiquitous OpenSSL library: "Heartbleed"

2014-04-07 Thread Peter Kristolaitis
Not just run the updates -- all private keys should be changed too, on the assumption that they've been compromised already. THAT is going to be the crappy part of this. - Pete On 4/8/2014 1:13 AM, David Hubbard wrote: RHEL and CentOS both have patches out as of a couple hours ago, so run t

Re: Fwd: Serious bug in ubiquitous OpenSSL library: "Heartbleed"

2014-04-07 Thread Peter Kristolaitis
OK, now... it's far too late for April Fool's. :( That's scary as heck. :(Guess I know what the first order of business will be tomorrow... - Pete On 4/8/2014 1:06 AM, Paul Ferguson wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I'm really surprised no one has mentioned this

RE: Serious bug in ubiquitous OpenSSL library: "Heartbleed"

2014-04-07 Thread David Hubbard
RHEL and CentOS both have patches out as of a couple hours ago, so run those updates! CentOS' mirrors do not all have it yet, so if you are updating, make sure you get the 1.0.1e-16.el6_5.7 version and not older. David -Original Message- From: Paul Ferguson [mailto:fergdawgs...@mykolab.c

Fwd: Serious bug in ubiquitous OpenSSL library: "Heartbleed"

2014-04-07 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I'm really surprised no one has mentioned this here yet... FYI, - - ferg Begin forwarded message: > From: Rich Kulawiec Subject: Serious bug in > ubiquitous OpenSSL library: "Heartbleed" Date: April 7, 2014 at > 9:27:40 PM EDT > > This reache

RE: Anternet

2014-04-07 Thread Sachs, Marcus Hans (Marc)
Ant algorithms are currently part of the communications infrastructure. Here is a recent paper, and see the reference in the paper about the Ant Based Control (ABC) algorithm that is used for circuit switched networks. Marc http://www.ijarcsse.com/docs/papers/Volume_3/3_March2013/V3I3-0125.pdf

Re: Anternet

2014-04-07 Thread Stephane Bortzmeyer
On Sat, Apr 05, 2014 at 12:44:05AM -0500, Larry Sheldon wrote a message of 9 lines which said: > http://kottke.org/14/04/the-anternet But what is the equivalent of 3-way handshake? And of ECN (ants carrying back messages "I still bring food but it won't last")? And the security implications (