Bypassing certificate checks in OpenSSL 1. Many lines of code have been changed, but most important is a Security Fix that allowed an attacker to bypass certain checks on certificates. The problem is summarized in the changelog of the new release. How does certificate validation work? How does the attack work? Certificate with .

Des Bundesamts für Strahlenschutz ist mir auf Seite 55. Vor kurzem habe ich mich endlich dazu entschlossen, das BfS mal zu fragen, was es damit auf sich hatte, und habe eine ausführliche und lesenswerte Antwort erhalten.

runs went bankrupt, the blog is defunct now. I reposted this here in July 2015 to preserve it for posteriority. Design bugs are my favourite bugs. About six years ago, while I was working in the Public Key Infrastructure area, I identified such a bug in the X. Were released in April 2008.

Kernel, Hypervisor, Virtualization, Trusted Computing and other system-level security stuff. Monday, February 09, 2015. Migrating my blog out of Blogger. The new blog is now hosted here. Monday, February 09, 2015. Thursday, November 27, 2014. The concept has been described in this post.