Slashdot Mirror

← Back to Stories (view on slashdot.org)

POODLE Flaw Returns, This Time Hitting TLS Protocol

Posted by Soulskill on from the its-bite-is-worse-than-its-bark dept.

angry tapir writes: If you patched your sites against a serious SSL flaw discovered in October you will have to check them again. Researchers have discovered that the POODLE vulnerability also affects implementations of the newer TLS protocol. The POODLE (Padding Oracle On Downgraded Legacy Encryption) vulnerability allows attackers who manage to intercept traffic between a user's browser and an HTTPS website to decrypt sensitive information, like the user's authentication cookies.

1 of 54 comments (clear)

  1. Re:After the jump BULLSHIT by Anonymous Coward · · Score: 2, Interesting

    Not to feed the trolls more but... did you know that if you are logged in you can click the comment score and SEE all the moderation on the comment?
    At the current time, the post in question started at 2 and has +1 Funny for a total of 3.

    If you are logged in, you can also change the weight of users to remove the karma bonus.