Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
NGI Zero open source funding (ngizero@mastodon.xyz)'s status on Tuesday, 10-Dec-2024 02:56:31 JST NGI Zero open source funding
- hanno
badkeys is an open source tool to check cryptographic keys for known vulnerabilities. Its developer @hanno gave a talk at German OWASP Day where he discussed how old bugs never die. He tested for the Debian OpenSSL bug discovered in 2008 & found hundreds of DKIM setups still vulnerable. Vulnerable hosts included prominent names like Cisco, Oracle, Skype, and Github. But he sees even older vulns including one which is over 300 years old.
Watch the talk here: https://media.ccc.de/v/god2024-56276-the-debian-openssl-bug-and
#NGI #NGI0
In conversation about 6 months ago from mastodon.xyz permalink
Attachments
1. Domain not in remote thumbnail source whitelist: static.media.ccc.de
  
  The Debian OpenSSL bug and other Public Private Keys
  
  from Hanno Böck
  
  In early 2024, hundreds of DKIM setups still used cryptographic keys vulnerable to a bug from 2008 in Debian's OpenSSL package. Vulnerabl...

Feeds