Security - Poodle - Revision history

Philip Lacey at 19:22, 9 November 2014

2014-11-09T19:22:40Z

Philip Lacey at 17:23, 24 October 2014

2014-10-24T17:23:16Z

Philip Lacey at 14:53, 24 October 2014

2014-10-24T14:53:13Z

Philip Lacey at 19:25, 22 October 2014

2014-10-22T19:25:27Z

Philip Lacey at 19:23, 22 October 2014

2014-10-22T19:23:59Z

Philip Lacey at 19:17, 22 October 2014

2014-10-22T19:17:52Z

Philip Lacey at 19:16, 22 October 2014

2014-10-22T19:16:49Z

Philip Lacey: Created page with "Poodle is the code name for a security hole discovered by Google, in a secure protocol used by computers to chat to each other. It stands for "Padding Oracle On Downgraded Le..."

2014-10-22T19:16:18Z

Created page with "Poodle is the code name for a security hole discovered by Google, in a secure protocol used by computers to chat to each other. It stands for "Padding Oracle On Downgraded Le..."

New page

Poodle is the code name for a security hole discovered by Google, in a secure protocol used by computers to chat to each other. It stands for "Padding Oracle On Downgraded Legacy Encryption"

There are some very clear explanations on the issue. One of these can be found here:

http://www.ibtimes.co.uk/what-poodle-latest-online-security-threat-after-shellshock-heartbleed-1470300

The bug affects the SSL encryption technology and allows hackers to trick computers into sharing sensitive data which could give them access to your emails or social media accounts.

How do I fix the problem?

Again, this is a relatively easy fix. You can simply instruct your browser not to support the SSL 3.0 standard and set the lower encryption standard to TLS 1.0, which is much more secure.

The problem of course is that you won't be able to visit the websites which continue to use SSL 3.0, though this is list is getting smaller and smaller.

Scott Helme has put together a comprehensive list of instructions on how to disable SSL 3.0 on Chrome, Firefox and Internet Explorer, as well as on servers running Apache, Nginix and IIS.

https://scotthelme.co.uk/sslv3-goes-to-the-dogs-poodle-kills-off-protocol/

All n One were aware of the issue on the 15th of October 2014, less than 24 hours after its discovery, however to facilitate some client infrastructures to move, implementation of the TLS only fix on the servers has been delayed to give clients a chance to update their infrastructures.

← Older revision		Revision as of 19:22, 9 November 2014
Line 54:		Line 54:

	However to facilitate some client infrastructures having to change, implementation of the TLS only fix on the servers has been delayed to give clients a chance to update their infrastructures.		However to facilitate some client infrastructures having to change, implementation of the TLS only fix on the servers has been delayed to give clients a chance to update their infrastructures.
		+
		+
		+
		+
		+	[[Category:Topic:Security]]

← Older revision		Revision as of 17:23, 24 October 2014
Line 54:		Line 54:

	However to facilitate some client infrastructures having to change, implementation of the TLS only fix on the servers has been delayed to give clients a chance to update their infrastructures.		However to facilitate some client infrastructures having to change, implementation of the TLS only fix on the servers has been delayed to give clients a chance to update their infrastructures.
−
−
−
−	~~[[BEmail_Content_Replacement]]~~
−	~~[[BEmail_Content_Retrieval]]~~
−	~~[[Business_Express_Database_Types]]~~
−	~~[[Business_Express_Form_Types]]~~
−	~~[[CrossLinked_Calculation_Fields]]~~
−	~~[[CrossLinked_Layouts]]~~
−	~~[[Custom_CSS]]~~
−	~~[[Data_Visualisation_Options]]~~
−	~~[[eCourse_Campaign_Data]]~~
−	~~[[eCourse_Name]]~~
−	~~[[Form_Section_Group]]~~
−	~~[[Form_Active_Flag]]~~
−	~~[[Form_Dates]]~~
−	~~[[Form_Examination_Types]]~~
−	~~[[Form_Mass_Add_Questions]]~~
−	~~[[Form_Name]]~~
−	~~[[Form_Section_Group]]~~
−	~~[[Form_Self_Generating_Logic]]~~
−	~~[[Form_Statistics_Calculations]]~~
−	~~[[Form_Statistics_Reports]]~~
−	~~[[Google_LatLong_Translation]]~~
−	~~[[Interface_Bars]]~~
−	~~[[JavaScript_ScriptingBoxes]]~~
−	~~[[KeyStat_Layout]]~~
−	~~[[KeyStat_Tabs]]~~
−	~~[[Latest_Updates]]~~
−	~~[[Mass_answer_editing_of_questions]]~~
−	~~[[MetaData_Input_Rules]]~~
−	~~[[MetaData_Process_Rules]]~~
−	~~[[MetaData_Program_and_Outcomes]]~~
−	~~[[QA_-_Scores_and_Thresholds]]~~
−	~~[[Quality_Assurance_Training]]~~
−	~~[[Quality_Assign_Options]]~~
−	~~[[Quality_Asssesors_From_Organogram]]~~
−	~~[[Quality_Assurance_Campaign]]~~
−	~~[[Quality_Assurance_Training]]~~
−	~~[[Quality_Covert_Form_To_Quality_Form]]~~
−	~~[[Quality_Create_From]]~~
−	~~[[Quality_Create_From#Form]]~~
−	~~[[Quality_Create_From#Organogram]]~~
−	~~[[Quality_Load_PreLoad_Options]]~~
−	~~[[Quality_On_Fail_Reinsert]]~~
−	~~[[Quality_Releasing_Key_Fields]]~~
−	~~[[Quality_Reporting_Header_Splitting]]~~
−	~~[[Quality_Score_Displaying]]~~
−	~~[[Quality_Support_Options]]~~
−	~~[[Question_Branching]]~~
−	~~[[Quick_Contact_Loading]]~~
−	~~[[Quota_Management]]~~
−	~~[[Special:Categories]]~~
−	~~[[Special:RecentChanges]]~~
−	~~[[Survey_Contact_Block]]~~
−	~~[[Survey_Feedback]]~~
−	~~[[Survey_Horizontal]]~~
−	~~[[Survey_Horizontal_Vs_Vertical]]~~
−	~~[[Survey_Template_1]]~~
−	~~[[Survey_Template_2]]~~
−	~~[[Survey_Template_3]]~~
−	~~[[Survey_Templates]]~~
−	~~[[Survey_Vertical]]~~
−	~~[[Surveys]]~~
−	~~[[Training]]~~
−	~~[[What_is_a_Blended_Campaign]]~~
−	~~[[What_is_an_eCourse]]~~
−	~~[[What_is_an_Inbound_Campaign]]~~
−	~~[[Whitepapers]]~~

← Older revision		Revision as of 14:53, 24 October 2014
Line 54:		Line 54:

	However to facilitate some client infrastructures having to change, implementation of the TLS only fix on the servers has been delayed to give clients a chance to update their infrastructures.		However to facilitate some client infrastructures having to change, implementation of the TLS only fix on the servers has been delayed to give clients a chance to update their infrastructures.
		+
		+
		+
		+	[[BEmail_Content_Replacement]]
		+	[[BEmail_Content_Retrieval]]
		+	[[Business_Express_Database_Types]]
		+	[[Business_Express_Form_Types]]
		+	[[CrossLinked_Calculation_Fields]]
		+	[[CrossLinked_Layouts]]
		+	[[Custom_CSS]]
		+	[[Data_Visualisation_Options]]
		+	[[eCourse_Campaign_Data]]
		+	[[eCourse_Name]]
		+	[[Form_Section_Group]]
		+	[[Form_Active_Flag]]
		+	[[Form_Dates]]
		+	[[Form_Examination_Types]]
		+	[[Form_Mass_Add_Questions]]
		+	[[Form_Name]]
		+	[[Form_Section_Group]]
		+	[[Form_Self_Generating_Logic]]
		+	[[Form_Statistics_Calculations]]
		+	[[Form_Statistics_Reports]]
		+	[[Google_LatLong_Translation]]
		+	[[Interface_Bars]]
		+	[[JavaScript_ScriptingBoxes]]
		+	[[KeyStat_Layout]]
		+	[[KeyStat_Tabs]]
		+	[[Latest_Updates]]
		+	[[Mass_answer_editing_of_questions]]
		+	[[MetaData_Input_Rules]]
		+	[[MetaData_Process_Rules]]
		+	[[MetaData_Program_and_Outcomes]]
		+	[[QA_-_Scores_and_Thresholds]]
		+	[[Quality_Assurance_Training]]
		+	[[Quality_Assign_Options]]
		+	[[Quality_Asssesors_From_Organogram]]
		+	[[Quality_Assurance_Campaign]]
		+	[[Quality_Assurance_Training]]
		+	[[Quality_Covert_Form_To_Quality_Form]]
		+	[[Quality_Create_From]]
		+	[[Quality_Create_From#Form]]
		+	[[Quality_Create_From#Organogram]]
		+	[[Quality_Load_PreLoad_Options]]
		+	[[Quality_On_Fail_Reinsert]]
		+	[[Quality_Releasing_Key_Fields]]
		+	[[Quality_Reporting_Header_Splitting]]
		+	[[Quality_Score_Displaying]]
		+	[[Quality_Support_Options]]
		+	[[Question_Branching]]
		+	[[Quick_Contact_Loading]]
		+	[[Quota_Management]]
		+	[[Special:Categories]]
		+	[[Special:RecentChanges]]
		+	[[Survey_Contact_Block]]
		+	[[Survey_Feedback]]
		+	[[Survey_Horizontal]]
		+	[[Survey_Horizontal_Vs_Vertical]]
		+	[[Survey_Template_1]]
		+	[[Survey_Template_2]]
		+	[[Survey_Template_3]]
		+	[[Survey_Templates]]
		+	[[Survey_Vertical]]
		+	[[Surveys]]
		+	[[Training]]
		+	[[What_is_a_Blended_Campaign]]
		+	[[What_is_an_eCourse]]
		+	[[What_is_an_Inbound_Campaign]]
		+	[[Whitepapers]]

← Older revision		Revision as of 19:25, 22 October 2014
Line 5:		Line 5:


−	There are some very clear explanations on the issue. ~~One of these can be found here:~~	+	There are some very clear explanations on the issue.


−	http://www.~~ibtimes.co~~.uk/~~what-poodle-latest-online-security-threat-after-shellshock-heartbleed-1470300~~	+	If you'd rather watch a video on it: http://www.youtube.com/watch?v=C8ks8WLoZto

		+
		+	If you'd prefer to read about it: http://www.ibtimes.co.uk/what-poodle-latest-online-security-threat-after-shellshock-heartbleed-1470300

← Older revision		Revision as of 19:23, 22 October 2014
Line 13:		Line 13:

	The bug affects the SSL encryption technology and allows hackers to trick computers into sharing sensitive data which could give them access to your emails or social media accounts.		The bug affects the SSL encryption technology and allows hackers to trick computers into sharing sensitive data which could give them access to your emails or social media accounts.
		+
		+
		+
		+	== How can I check ? ==
		+
		+
		+	http://www.poodletest.com/
		+
		+
		+	if you want to test a server
		+
		+
		+	http://www.poodlescan.com/


Line 29:		Line 42:

	https://scotthelme.co.uk/sslv3-goes-to-the-dogs-poodle-kills-off-protocol/		https://scotthelme.co.uk/sslv3-goes-to-the-dogs-poodle-kills-off-protocol/
		+

← Older revision		Revision as of 19:17, 22 October 2014
Line 31:		Line 31:


−	All n One were aware of the issue on the 15th of October 2014, less than 24 hours after its discovery~~, however~~ to facilitate some client infrastructures to ~~move~~, implementation of the TLS only fix on the servers has been delayed to give clients a chance to update their infrastructures.	+	== Poodle and bxp software ==
		+
		+
		+	All n One were aware of the issue on the 15th of October 2014, less than 24 hours after its discovery
		+
		+
		+	However to facilitate some client infrastructures having to change, implementation of the TLS only fix on the servers has been delayed to give clients a chance to update their infrastructures.

← Older revision		Revision as of 19:16, 22 October 2014
Line 1:		Line 1:
		+	== Overview ==
		+
		+
	Poodle is the code name for a security hole discovered by Google, in a secure protocol used by computers to chat to each other. It stands for "Padding Oracle On Downgraded Legacy Encryption"		Poodle is the code name for a security hole discovered by Google, in a secure protocol used by computers to chat to each other. It stands for "Padding Oracle On Downgraded Legacy Encryption"

Line 12:		Line 15:


−	How do I fix the problem?	+
		+	== How do I fix the problem? ==