Writing · Tag

Posts tagged google

2 posts .

POODLE

19 October 2014

Five days after the POODLE disclosure. The attack works against SSLv3 specifically, the protocol-downgrade pattern means it can be forced against any browser-server pair where SSLv3 is still enabled. The structural answer is to disable SSLv3 entirely.

cve-2014-3566 google padding-oracle poodle sslv3 tls-downgrade

Operation Aurora and the APT framing

22 January 2010

Google disclosed sustained targeted-attack activity earlier this month. The cumulative incident is being framed as Advanced Persistent Threat — a category that may shift the broader threat-model.

apt aurora china google targeted-attacks