April 9th, 2014, 09:28 AM | #1 |
The Corner Whisperer
Name: Chris (aka Reactor)
Location: Northern KY
Join Date: May 2011 Motorcycle(s): 2010 250 (track), 1992 250, 2006 R6 (street/track), 2008 R6 (track) Posts: Too much.
MOTY 2015, MOTM - Nov '12, Nov '13
|
Heartbleed SSL Bug
@Alex - I just got a warning about the heartbleed SSL bug on ninjette.org. Can you verify or is it a false positive?
__________________________________________________
Goal: Shake A Million Hands | Look through the corners | Track Day Prep | Closest track? | The Mid-Ohio School |
|
April 9th, 2014, 10:44 AM | #2 |
ninjette.org dude
Name: 1 guess :-)
Location: SF Bay Area
Join Date: Jun 2008 Motorcycle(s): '13 Ninja 300 (white, the fastest color!), '13 R1200RT, '14 CRF250L, '12 TT-R125LE Posts: Too much.
Blog Entries: 7
|
I updated the OpenSSL libraries Monday night right after the Centos updates were released. I was getting a false positive once or twice soon after, but haven't seen them in more recent tests. This is a result of the scanners getting overloaded; there have been no changes on our server here since that initial update. Here's the most prominent one I've been seeing referenced:
http://filippo.io/Heartbleed/ The timing for us is pretty amazing, actually. I just created the cert over the weekend, so the time for the vulnerability to be open right up unti lthe time of the patch was only a day or two, compared to any other site that had SSL up and running before, say, this weekend.
__________________________________________________
Montgomery Street Motorcycle Club / cal24.com / crf250l.org / ninjette.org ninjette.org Terms of Service Shopping for motorcycle parts or equipment? Come here first. The friendliest Ninja 250R/300/400 forum on the internet! (especially Unregistered) |
|
April 9th, 2014, 10:51 AM | #3 |
The Corner Whisperer
Name: Chris (aka Reactor)
Location: Northern KY
Join Date: May 2011 Motorcycle(s): 2010 250 (track), 1992 250, 2006 R6 (street/track), 2008 R6 (track) Posts: Too much.
MOTY 2015, MOTM - Nov '12, Nov '13
|
I figgered it might have been a false positive, as it seemed a bit random in nature. No harm in checking though.
__________________________________________________
Goal: Shake A Million Hands | Look through the corners | Track Day Prep | Closest track? | The Mid-Ohio School |
|
April 9th, 2014, 11:16 AM | #4 |
ninjette.org dude
Name: 1 guess :-)
Location: SF Bay Area
Join Date: Jun 2008 Motorcycle(s): '13 Ninja 300 (white, the fastest color!), '13 R1200RT, '14 CRF250L, '12 TT-R125LE Posts: Too much.
Blog Entries: 7
|
Some useful links if people are interested in this high-profile security topic:
http://lifehacker.com/what-the-heart...you-1560801201 http://www.zdnet.com/heartbleed-seri...ed-7000028166/ http://www.zdnet.com/heartbleed-secu...us-7000028216/ http://www.thewire.com/technology/20...ternet/360366/ https://www.schneier.com/blog/archiv...eartbleed.html
__________________________________________________
Montgomery Street Motorcycle Club / cal24.com / crf250l.org / ninjette.org ninjette.org Terms of Service Shopping for motorcycle parts or equipment? Come here first. The friendliest Ninja 250R/300/400 forum on the internet! (especially Unregistered) |
|
April 9th, 2014, 11:26 AM | #5 |
ninjette.org dude
Name: 1 guess :-)
Location: SF Bay Area
Join Date: Jun 2008 Motorcycle(s): '13 Ninja 300 (white, the fastest color!), '13 R1200RT, '14 CRF250L, '12 TT-R125LE Posts: Too much.
Blog Entries: 7
|
__________________________________________________
Montgomery Street Motorcycle Club / cal24.com / crf250l.org / ninjette.org ninjette.org Terms of Service Shopping for motorcycle parts or equipment? Come here first. The friendliest Ninja 250R/300/400 forum on the internet! (especially Unregistered) |
1 out of 1 members found this post helpful. |
April 9th, 2014, 12:20 PM | #6 |
ninjette.org certified postwhore
Name: Paul
Location: UK
Join Date: Apr 2014 Motorcycle(s): Ninja 250, Yamaha RS200 (classic) Posts: A lot.
|
|
|
April 9th, 2014, 12:28 PM | #7 |
The Corner Whisperer
Name: Chris (aka Reactor)
Location: Northern KY
Join Date: May 2011 Motorcycle(s): 2010 250 (track), 1992 250, 2006 R6 (street/track), 2008 R6 (track) Posts: Too much.
MOTY 2015, MOTM - Nov '12, Nov '13
|
Naw, I could connect. I am a developer by trade so I have some extra security tools installed and it flagged the SSL cert. I don't "think" the problems are related but who knows.
__________________________________________________
Goal: Shake A Million Hands | Look through the corners | Track Day Prep | Closest track? | The Mid-Ohio School |
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Trying out SSL | Alex | Forum Information | 13 | March 7th, 2015 09:05 PM |
SSL Speakers and Amp Install | Bushmaster11B | 2008 - 2012 Ninja 250R Farkles | 3 | October 29th, 2012 01:53 PM |
|
|