HeartBleed OpenSSL Bug

The OpenSSL cryptographic software library have a serious vulnerability called HeartBleed. This vulnerability cause the internet connection insecure because it was using the SSL/TLS encryption, the information can be easily stoled by thirds party.

Almost all internet application of the security communication and privacy over the internet is using SSL/TLS. This weakeness will cause the application like web, email, instant messaging,and some Virtual Private networks being compromise.

Heartbleed bug is allows anyone on the internet to read the memory of the systems protected by the vulnerable version of the OpenSSL software. This cause the secret keys that identify the services providers and to encrypt the traffic, important information like names, passwords of the users and it content being compromises. Hackers able to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users. What leaks in practice? We have tested some of our own services from attacker's perspective. We attacked ourselves from outside, without leaving a trace. Without using any privileged information or credentials we were able steal from ourselves the secret keys used for our X.509 certificates, user names and passwords, instant messages, emails and business critical documents and communication.

How to stop the leak?

As long as the vulnerable version of OpenSSL is in use it can be abused.Fixed OpenSSL has been released and now it has to be deployed. Operating system vendors and distribution, appliance vendors, independent software vendors have to adopt the fix and notify their users. Service providers and users have to install the fix as it becomes available for the operating systems, networked appliances and software they use.

Comments

Post a Comment

Popular posts from this blog

Reading and Writing Operation of SRAM

Image
The diagram below is illustrate Static Random Access Memory (SRAM)Cell for the explanation. SRAM cell is make up of 2 inverters are cross-connected to form a latch .The latch is connected to 2 bit line by transistor T1 and T2 . T1 and T2 can switch opened or closed under control of word line.When word line is ground level, the transistors are turned off and the latch retrains its state. During the Read Operation ,Word line is activated to close switches T1 and T2 . If the cell is in state 1; the signal on b line is high and the signal on b’ line is low.The opposite is true if the cell is in state 0.Thus, b and b’ are always complements of each other’s. The sense /write circuit at the end of the two bit line monitors their state and sets the corresponding output accordingly. While in Write Operation ,the Sense/Write circuit drives bit lines b and b’, instead of sensing their state.It places the appropriate value on bit line b and its complement on b’ and activate the word ...
Read more

Reading & Writing Operation of DRAM

Image
In Dynamic Random Access Memory CELL , transistor acts as a switch to Close (allowing current to flow) when voltage applied in address line or Open (no current flow) when no voltage applied in address line.Address Line also known as word line .Which use to signal the transistor to close or open. During the Write operation ,a voltage is applied on the bit line and a signal applied to the address line to close the transistor.Then the voltage applied on the bit line will transfer to capacitor and store in the capacitor However the capacitor has tendency to discharge and has to refresh to maintain the bit. While in Reading Operation ,the instruction find the bit store using the address line to read the data or bit. When the address line is selected ,the transistor turns on and the charge stored on the capacitor is fled out onto a bit line and to sense amplifier. Sense amplifiers compare the capacitor voltage to reference value to determine the logic 1 or logic 0.The read out from ...
Read more

Method to Convert from Stream to Json C#

Recently I was using the C# HttpClient to make REST request but I found that is was quite troublesome so I have changed to using HttpWebRequest instead. So want the HttpWebRequest result is return it was in Stream form. I not able to convert it into Json. this is the method i convert the stream to JSON. HttpWebResponse response = ( HttpWebResponse ) requirejs . GetResponse (); Stream stream = response . GetResponseStream (); StreamReader sr = new StreamReader ( stream ); var serializer = new System . Web . Script . Serialization . JavaScriptSerializer (); var jsonObject = serializer . DeserializeObject ( sr . ReadToEnd ()); As you can see that jsonObject is an object. Now you can parse it into the Json(JsonObject); If you have any question can leave a comment below.
Read more