SHA-1 is Officially Dead and What is CloudBleed? - Threat Wire




Threat Wire show

Summary: <br> Cloudflare experiences a bug, SHA-1 is officially dead, and a man accused of DDoSing almost a million people has been arrested. All that coming up now on Threat Wire.<br>  <br> Links:<br> <a href="https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/">https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/</a><br> <a href="https://twitter.com/taviso/status/832744397800214528">https://twitter.com/taviso/status/832744397800214528</a><br> <a href="https://www.cnet.com/how-to/cloudbleed-bug-everything-you-need-to-know/">https://www.cnet.com/how-to/cloudbleed-bug-everything-you-need-to-know/</a><br> <a href="https://bugs.chromium.org/p/project-zero/issues/detail?id=1139">https://bugs.chromium.org/p/project-zero/issues/detail?id=1139</a><br> <a href="https://www.troyhunt.com/pragmatic-thoughts-on-cloudbleed/">https://www.troyhunt.com/pragmatic-thoughts-on-cloudbleed/</a><br> <a href="https://medium.com/@octal/cloudbleed-how-to-deal-with-it-150e907fd165#.b1zg99ry2">https://medium.com/@octal/cloudbleed-how-to-deal-with-it-150e907fd165#.b1zg99ry2</a><br> <a href="http://www.doesitusecloudflare.com/">http://www.doesitusecloudflare.com/</a><br> <a href="https://github.com/pirate/sites-using-cloudflare">https://github.com/pirate/sites-using-cloudflare</a><br> <a href="https://blog.agilebits.com/2017/02/23/three-layers-of-encryption-keeps-you-safe-when-ssltls-fails/">https://blog.agilebits.com/2017/02/23/three-layers-of-encryption-keeps-you-safe-when-ssltls-fails/</a><br>  <br> <a href="https://thehackernews.com/2017/02/sha1-collision-attack.html">https://thehackernews.com/2017/02/sha1-collision-attack.html</a><br> <a href="https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html">https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html</a><br> <a href="https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/">https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/</a><br> <a href="https://arstechnica.com/security/2017/02/watershed-sha1-collision-just-broke-the-webkit-repository-others-may-follow/">https://arstechnica.com/security/2017/02/watershed-sha1-collision-just-broke-the-webkit-repository-others-may-follow/</a><br> <a href="https://shattered.io/static/shattered-1.pdf">https://shattered.io/static/shattered-1.pdf</a><br> <a href="https://shattered.io/static/shattered-2.pdf">https://shattered.io/static/shattered-2.pdf</a><br> <a href="https://shattered.io/">https://shattered.io/</a><br> <a href="https://shattered.io/static/shattered.pdf">https://shattered.io/static/shattered.pdf</a><br>  <br> <a href="https://thehackernews.com/2017/02/mirai-router-hacking.html">https://thehackernews.com/2017/02/mirai-router-hacking.html</a><br> <a href="https://motherboard.vice.com/en_us/article/police-have-arrested-a-suspect-in-a-massive-internet-of-things-attack">https://motherboard.vice.com/en_us/article/police-have-arrested-a-suspect-in-a-massive-internet-of-things-attack</a><br> <a href="http://www.presseportal.de/blaulicht/pm/7/3568074">http://www.presseportal.de/blaulicht/pm/7/3568074</a><br> <a href="http://www.spoofit.org/bestbuy-vdos-reloaded/">http://www.spoofit.org/bestbuy-vdos-reloaded/</a><br> <a href="http://www.spoofit.org/lonestarcell.txt">http://www.spoofit.org/lonestarcell.txt</a><br>  <br> Youtube thumbnail title:<br> https://cdn.pixabay.com/photo/2016/12/07/12/58/virus-1889413_960_720.jpg<br>