[ninux-not-wireless] craccato TLS 1.0 - SSL 3.1

[Clauz]

Hanno craccato SSL! Quindi occhio quando andate sui siti delle banche &
co che usino versioni superiori a TLS 1.0 o SSL 3.1. E se proprio usano
queste versioni controllate che usino rc4. Altrimenti meglio non fare il
login!

http://www.theregister.co.uk/2011/09/19/beast_exploits_paypal_ssl/

https://secure.wikimedia.org/wikipedia/en/wiki/Transport_Layer_Security#TLS_1.0_.28SSL_3.1.29

https://www.schneier.com/blog/archives/2011/09/man-in-the-midd_4.html

bella,
Clauz


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <http://ml.ninux.org/pipermail/not-wireless/attachments/20111005/52a7ad7d/attachment-0001.sig>