Like, do we need to change our passwords? What does it mean, blah blah blah. Much misunderstanding about what it is and why it is. Leo: And the Heartbleed exploit, of course, an OpenSSL exploit that's been in all the news today. So today's podcast is titled "How the Heartbleeds." But it gave us this fabulous opportunity last night. I'd be really annoyed if this happened on Wednesday because then we'd have to wait a week. This is what the podcast is for, is for exactly this kind of thing. And finally that resolution just collapsed because just too much was happening. And I thought this would just make a fabulous podcast.Īnd so I was, until middle of the morning, I was holding onto it, knowing that we would have to talk about Heartbleed, but still planning to make it a bullet point at the beginning of the show. And so I'm really tuned up for, like, exactly what are the challenges that a developer faces. But I'm now in the middle of it because I am working on SQRL's entropy harvester. So I was saying to you before we began, before you pressed - while you had your finger on the record button, that I was holding onto today's topic, the originally planned-for today's topic, that I've been working on for some time, which is harvesting entropy.
He's got his finger on the pulse of security. And of course there was no better person when I first thought of doing this show than Steve Gibson to host it. It's time for Security Now!, the show where we cover your security, your privacy online. Leo Laporte: This is Security Now! with Steve Gibson, Episode 450, recorded April 8, 2014: How the Heartbleeds. And we'll talk about a new exploit in OpenSSL that's got everybody shaking in the knees: Heartbleed, our topic, next on Security Now!. Quarter size (16 kbps) mp3 audio file URL: High quality (64 kbps) mp3 audio file URL: It's been named "Heartbleed" because it abuses the new TLS "heartbeat" extension to bleed the server of critical security information. We share a bunch of interesting miscellany, then take a very deep dive to examine and understand the technology, events and implications of yesterday's (April 7, 2014) discovery of a two-year-old critical buffer overrun bug in the open source industry's OpenSSL protocol package.
Windows xp background future ristic update#
Description: Leo and I discuss this long-anticipated, final "Second Tuesday of the Month" patch update for Windows XP - which has finally arrived.
0 kommentar(er)
