Me Hungy

Apr 12 2014

Proof the SSL bug is real

Hide yo kids, hide yo passwords…

A CDN (Cloudflare) issued a challenge earlier this week for all comers to prove that the SSL bug is more than just theoretical by putting up a test server for folks to hack. Well, as of last night, several people have actually done so:

http://blog.cloudflare.com/the-results-of-the-cloudflare-challenge

Below is what we thought as of 12:27pm UTC. To verify our belief we crowd sourced the investigation. It turns out we were wrong. While it takes effort, it is possible to extract private SSL keys. The challenge was solved by Software Engineer Fedor Indutny and Ilkka Mattila at NCSC-FI roughly 9 hours after the challenge was first published. Fedor sent 2.5 million requests over the course of the day and Ilkka sent around 100K requests. Our recommendation based on this finding is that everyone reissue and revoke their private keys. CloudFlare has accelerated this effort on behalf of the customers whose SSL keys we manage. You can read more here.

If you were uncertain before about whether you should really change your passwords, this is all the proof you need to go change your passwords NOW.

Comments
Feb 08 2014
PhotoAlt

Hope these cherimoyas are good cuz they cost a small fortune, even at Northgate where you can get two chickens and a bag of Takis for less.

Comments
Jan 18 2014

After restoring Galaxy Note 2 to stock 4.3 ROM, CF-auto-root still failed, but Kingo Root app actually worked. Totally shocked and impressed…it’s a free app but going to make a donation.

 http://www.kingoapp.com/

Comments
Dec 28 2013
PhotoAlt

This what a 12,000 Won waffle looks like (hint: 1000=$1US). #seoulexpensive #priceybutgood

Comments
Dec 26 2013
PhotoAlt

It’s seoul cold here at the DMZ! #defecting #communismrocks

Comments
Nov 16 2013
PhotoAlt

Waiter: I love your sweater!
Ms O: Thank you! My husband makes fun of it.
Waiter: Who’s your husband?! (look of shock)
Me: (thinking: uh, I’m right here)

Comments
Nov 11 2013
PhotoAlt

Jollibee likes the color of my kicks.

Comments
Nov 09 2013
PhotoAlt

Welcome our new addition to the Stoner clan: Jollibee Afra. #animalshelter

Comments
Nov 01 2013
PhotoAlt

It’s Bring-Schleppie-to-Work Day at #Mobolize

Comments
Oct 27 2013
PhotoAlt

Lou`s new shop #louprovisions

Comments
Page 1 of 18
Bill Israel designed