Conversation

Notices

1. halcy​:icosahedron: (halcy@icosahedron.website)'s status on Tuesday, 12-Dec-2017 11:22:04 EST halcy​:icosahedron:

   https://robotattack.org/ while we‘re all thinking about HACKING and THE NINETIES, here‘s a new RSA padding oracle vulnerability, affecting a wide array of big and small websites. Yes, in 2017!

   1. Gadfly (-booq-) (gaditb@icosahedron.website)'s status on Tuesday, 12-Dec-2017 11:31:17 EST Gadfly (-booq-)

      in reply to

      @halcy

      Oh my god:
      """
      [Cisco ACE] devices don't support any other cipher suites, therefore disabling RSA is not an option. To our knowledge it is not possible to use these devices for TLS connections in a secure way.

      However, if you use these products you're in good company: As far as we can tell Cisco is using them to serve the cisco.com domain.
      """