Slashdot Mirror

← Back to Stories (view on slashdot.org)

POODLE Flaw Returns, This Time Hitting TLS Protocol

Posted by Soulskill on from the its-bite-is-worse-than-its-bark dept.

angry tapir writes: If you patched your sites against a serious SSL flaw discovered in October you will have to check them again. Researchers have discovered that the POODLE vulnerability also affects implementations of the newer TLS protocol. The POODLE (Padding Oracle On Downgraded Legacy Encryption) vulnerability allows attackers who manage to intercept traffic between a user's browser and an HTTPS website to decrypt sensitive information, like the user's authentication cookies.

2 of 54 comments (clear)

  1. Re:After the jump BULLSHIT by Nyder · · Score: 3, Funny

    Don't you mean Dog shit instead of bullshit? After all, this is a POODLE vulnerability.

    --
    Be seeing you...
  2. This is the God of Job by grcumb · · Score: 1, Funny

    If there were a just and caring God, he would never let geeks name things.

    POODLE?

    Jesus wept. Literally. He heard the name and wept tears.

    Geeks made baby Jesus cry.

    --
    Crumb's Corollary: Never bring a knife to a bun fight.