News for hackers. Stuff that matters.

A comment on OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701). Parent comment

Re:OpenSSL Key Recovery Attack on DH small subgroups (CVE-20... by jvehent on Thursday January 28, 2016 @11:34AM (#10989160)
That's what your local security team should be for ;) At Mozilla, we track those and inform the various ops teams of our assessments. They very much rely on us to decide if it warrants emergency patching or not (modulo operational concerns to upgrade systems outside maintenance windows).
[ Parent | on HN ]
Re:OpenSSL Key Recovery Attack on DH small subgroups (CVE-20... by detaro on Thursday January 28, 2016 @12:06PM (#10989429)
Not so great an option if the closest thing to a "local security team" is the sysadmin asking the question ;)
[ Parent | on HN ]
Re:OpenSSL Key Recovery Attack on DH small subgroups (CVE-20... by tokenizerrr on Thursday January 28, 2016 @01:21PM (#10990056)
That's great. Now what about smaller companies which have one, maybe two sysadmins?
[ Parent | on HN ]