Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. Check out the new SourceForge HTML5 Internet speed test! ×

Submission + - Bug in the GnuTLS Library leaves many OSs and Apps at risk (arstechnica.com)

williamyf writes: According to our friends at ArsTechnica:

"The bug in the GnuTLS library makes it trivial for attackers to bypass secure sockets layer (SSL) and Transport Layer Security (TLS) protections available on websites that depend on the open source package. Initial estimates included in Internet discussions such as this one indicate that more than 200 different operating systems or applications rely on GnuTLS to implement crucial SSL and TLS operations, but it wouldn't be surprising if the actual number is much higher. Web applications, e-mail programs, and other code that use the library are vulnerable to exploits that allow attackers monitoring connections to silently decode encrypted traffic passing between end users and servers."

What's even more, the coding error *may* have been present since 2005, so one has to wander, again, where were those "many eyes that render all bugs shallow" one keeps hearing about...

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Bug in the GnuTLS Library leaves many OSs and Apps at risk

Comments Filter:

Over the shoulder supervision is more a need of the manager than the programming task.

Working...