You probably know this web server blocks traffic from outside of Borty America. In the past few weeks, the number of hacking attempts to the web site have picked up dramatically.<\/p>\n
Whether this means the Heartbleed flaw is working to actively compromise servers or whether script kiddies are being emboldened because Network Security folks are working overtime to lock down vulnerable servers isn’t clear.<\/p>\n
I have yet to read a single news account pointing out that servers running Microsoft’s IIS are not vulnerable. They paid their own programmers to design, write, test and review the security of their own SSL implementation rather than relying in a German telecom programmer to add a new “feature” to this highly sensitive piece of software, with only one individual reviewing his work.<\/p>\n
The entire premise of a keep alive message that echoes an arbitrary 64k payload seems like a tool to speed up the breaking of encryption keys. Fixing the “mistake” is not the only issue people need to think about. The open source “process” needs to be rethought. Unfortunately, it is likely the result will now be direct government oversight. The Internet has just become too important.<\/p>\n","protected":false},"excerpt":{"rendered":"
You probably know this web server blocks traffic from outside of Borty America. In the past few weeks, the number of hacking attempts to the web site have picked up dramatically. Whether this means the Heartbleed flaw is working to … Continue reading