After Debian's Epic SSL Blunder, a World of Hurt for Security Pros


The central voice for Linux and Open Source security news

Welcome!

Sign up!

EnGarde Community

Polls

How strictly do your users obey your security policies?

	To the letter.
	For the most part.
	When it suits them.
	By chance.
	Not at all.

Advisories

Community

Linux Events

Linux User Groups

Link to Us

Security Center

Book Reviews

Security Dictionary

Security Tips

SELinux

White Papers

Featured Blogs

Emily Ratliff: OS Security

DanWalsh LiveJournal

Security Bloggers Network

Latest Newsletters

Linux Security Week: December 1st, 2008

Linux Advisory Watch: November 28th, 2008

LinuxSecurity Newsletters

RSS Feeds

Get the LinuxSecurity news you want faster with RSS

After Debian's Epic SSL Blunder, a World of Hurt for Security Pros

User Rating:

How can I rate this item?

Source: The Register - Posted by Bill Keys

It's been more than a week since Debian patched a massive security hole in the library the operating system uses to create cryptographic keys for securing email, websites and administrative servers. Now the hard work begins, as legions of admins are saddled with the odious task of regenerating keys too numerous for anyone to estimate. What do you think is the state of computer security after the OpenSSL flaw was found and patched?

Read this full article at The Register

Comments

It wasn't really an OpenSSL Flaw

Written by Swashbuckler on 2008-05-22 14:27:21

It was a flaw in how Debian built OpenSSL...

Response to OpenSSL comments

Written by TommyTomTom on 2008-05-23 02:59:09

Good Evening,
I don't think that there are any problems for system administrators now. If products like openssl and openssh were compiled from source and trusted only from the provider there should be no issues as such.

TommyTomTom

After Debian's Epic SSL Blunder, a Worl

Written by anon on 2008-05-26 13:28:02

you security guy's are insane

Write Comment
Please keep the topic of messages relevant to the subject of the article. Personal verbal attacks will be deleted. Please don't use comments to plug your web site.. Such material will be removed.
Name:
Title:
Comment:
Code:*

< Prev		Next >

Partner:

Latest Features

A Secure Nagios Server

Never Installed a Firewall on Ubuntu? Try Firestarter

Review: Hacking Exposed Linux, Third Edition

Security Features of Firefox 3.0

Review: The Book of Wireless

April 2008 Open Source Tool of the Month: sudo

Open Source Tool of March: ZoneMinder

Yesterday's Edition

Linux Role in Botnets Studied

10 Mistakes New Linux Administrators Make

QuickLinks: Comunity , HOWTOs , Blogs , Features , Book Reviews , Networking ,
Security Projects , Latest News , Newsletters , SELinux , Privacy , Home,
Hardening , About Us, Advertise, Legal Notice, RSS, Guardian Digital