SSL broken, again, in POODLE attack

[Chiefcrowe]

http://arstechnica.com/security/2014/10/ssl-broken-again-in-poodle-attack

 

[Paperlantern]

This was long overdue though, the vulnerable technology is 15+ years old. Relatively easy mitigation. Just disable it.

 

[Elixer]

This was long overdue though, the vulnerable technology is 15+ years old. Relatively easy mitigation. Just disable it.

Disable it ? Think of all the users still using IE 6!

 

[Chiefcrowe]

Some more info on poodle:

http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html

http://blogs.opera.com/security/2014/10/security-changes-opera-25-poodle-attacks