Skip to content

Tag Archives: chrome

FFFjacking

FFFjacking is new web browser hacking technique discovered by  Roman Kümmel (aka .cCuMiNn.). Even though it requires a little of social engineering, it is quite dangerous. Yet another string to add to the bow.

Posted 03 June 2011 § Security § Web ‡ Comments (0) ° Also tagged: , , , , , ,

Yet OpenSSL renegociation not fully fixed

How the hell is it possible that after so many months, the fix for OpenSSL renegociation has not been yet included in either Chrome (6.0.4) or Opera (10.61)? I haven’t tested other browsers though, except Firefox which at least has fixed the issue since several months.

Posted 16 October 2010 § Admin § Cryptography § Linux § Security § System ‡ Comments (0) ° Also tagged: , , ,

Updates on OpenSSL CVE-2009-3555 (client renegociation)

So there are some news from the front of OpenSSL CVE-2009-3555 (see this and this for the history). Now the latest version of Apache mod_ssl (2.2) embeds an option to reactivate old way client renegociation : Check the official doc for more details. With this option activated, you can now safely upgrade openSSL and mod_ssl [...]

Posted 05 April 2010 § Admin § Cryptography § Linux § openSUSE § Security § System § Web ‡ Comments (3) ° Also tagged: , , , ,