security

Mitigating BEAST on Debian Apache web servers

gabster's picture
Submitted by gabster on Tue, 01/15/2013 - 13:36

The BEAST attack touches encryption protocols that came before TLS v1.1.

Basically, the attack would permit an attacker to try and guess the part that precedes the real message, and thus guess the real message. Since the explanation is very technical, I'll let technical people speak on the issue:

edit: please do not apply what is written in this article. RC4 is not a viable solution. please do continue to support only strong cypher suite and force your users to upgrade to more recent browser versions if security is an issue.

Tags:

Get off my lawn!

gabster's picture
Submitted by gabster on Sun, 01/15/2012 - 11:45

What is privacy? "Get off my lawn!" a grandpa would say when law enforcers came on behalf of corporations to take away his land. But some generations later, people would probably say something that sounds more like "I don't need to hide anything, since I'm not doing anything wrong".

What has gone wrong between the generations?

Tags:

Subscribe to RSS - security