News for hackers. Stuff that matters.
Re:Good fun with bad crypto by kingzero on Thursday January 16, 2014 @10:00AM (#7069684)
Same here. So i checked what ciphersuits they use.

TLS_RSA_WITH_RC4_128_SHA

Too bad they cant correctly set up their servers ...

Re:Good fun with bad crypto by valarauca1 on Thursday January 16, 2014 @10:09AM (#7069727)
Funny the blog post is about bad crypto and its all they support.
Re:Good fun with bad crypto by RRRA on Thursday January 16, 2014 @11:35AM (#7070363)
Funny how I had just disabled RC4 and DES in my browser... I wonder how can that be your only supported crypto in 2014!
Re:Good fun with bad crypto by wiml on Thursday January 16, 2014 @01:37PM (#7071469)
For a while, RC4 was recommended because it's immune to the BEAST attack.
Re:Good fun with bad crypto by valarauca1 on Thursday January 16, 2014 @02:14PM (#7071800)
A new theoretical attack was published in 2013 that showed that RC4 was still weak in TLS. While the attack was more academic, it did raise questions of what else would be possible.

We often forget that RC4 is a fundamentally broken algorithm.