The SSL and PHP Situation is Insane (and hilarious)
ThioJoe
0:00 / 0:00
The SSL and PHP Situation is Insane (and hilarious)
99 090 просмотров · 8 часов назад
ThioJoe
3,14 млн подписчиков
99 090 просмотров · 8 часов назад
Two insane security nightmares in one week!
This week PHP had a massive exploit released before the patch was available, effecting virtually all versions of PHP, leaving website owners scrambling. And also, a trusted root authority somehow managed to generate private keys for their intermediate certificates using all numbers less than 256, allowing them to be instantly brute forced. In fact, one of the private keys was literally the number "4'. This is actually maybe the funniest cyber-security screw up I've heard of in a while.
Time Stamps:
0:00 - Intro
0:21 - The Certificate Debacle
1:05 - Root Authorities
1:49 - The Problem
3:53 - Worse Than Just SSL
4:35 - Revocation Lists
6:44 - How to Check Yourself
8:07 - The PHP Nightmare
9:12 - What About Patches
10:15 - A Separate Vulnerability
10:45 - Apps Also Vulnerable
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
• My Desktop Wallpapers ⇨ https://thiojoe.art
⇨ / thiojoe
⇨ / thiojoe
⇨ / thiojoetv
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬