Skip to content

Malware University

Class is in Session

  • About
    • Privacy Policy
  • Contact
  • Resources

Tag: government

Charitable Internet Companies, Slow Moving Governments

Posted on March 20, 2020 - March 20, 2020 by admin

Mozilla, creator of popular internet browser Firefox, made the bold move of re-enabling suppor for outdated and very insecure (for governments especially) HTTP encryption protocols TLS v1.0 and 1.1. Several known attacks exists against services exposed over these protocols that are realistically exploitable for nation state attackers.

Many government sites around the world are still hosted using these long-outdated protocols despite being retired by all popular browsers back in October 2018. Qualys SSL Labs found over 97% of surveyed sites are supporting TLS v1.2+.

97% of surveyed sites support TLS 1.2 and 1.3

Still, at least 850000 websites are using these outdated protocols, allowing sophisticated attackers to, at the least, decrypt web traffic of other users.

Due to various governments apparently not having the means to upgrade their infrastructure during the global virus pandemic known as “Corona”, Mozilla decided to re-enable support for these retired, forbidden protocols to allow sharing of information.

Posted in Current EventsTagged government, TLS, virusLeave a comment

Recent Posts

  • Manual Scraping
  • Nitter Replacement
  • MFA Abuse in Splunk
  • Virtualbox Automation
  • Repository Poisoning

Recent Comments

    Archives

    • August 2024
    • July 2023
    • August 2022
    • March 2022
    • November 2021
    • October 2021
    • September 2021
    • August 2021
    • July 2021
    • June 2021
    • February 2021
    • December 2020
    • October 2020
    • September 2020
    • April 2020
    • March 2020
    • January 2020
    • July 2019
    • June 2019

    Categories

    • Campaign Analysis
    • Campaign Management
    • Code Analysis
    • Current Events
    • Malware Development
    • Techniques
    • Uncategorized
    • Utilities

    Meta

    • Log in
    • Entries feed
    • Comments feed
    • WordPress.org
    Proudly powered by WordPress | Theme: micro, developed by DevriX.