https://geopin-wiki.de/index.php?action=history&feed=atom&title=Newly_Found_Online_Security_Flaw_Stems_From_1990s 2026-05-14T14:57:17Z Versionsgeschichte dieser Seite in Geopin-Wiki.de MediaWiki 1.31.0 https://geopin-wiki.de/index.php?title=Newly_Found_Online_Security_Flaw_Stems_From_1990s&diff=40440&oldid=prev 2022-03-21T02:26:53Z

<p>Die Seite wurde neu angelegt: „Newly found online security flaw stems from 1990s By Afp &lt;br&gt; Published: 22:57, 3 March 2015 | Updated: 22:57, 3 March 2015 &lt;br&gt; e-mail…“</p> <p><b>Neue Seite</b></p><div>Newly found online security flaw stems from 1990s By Afp &lt;br&gt; Published: 22:57, 3 March 2015 | Updated: 22:57, 3 March 2015 &lt;br&gt; e-mail 6 shares &lt;br&gt;A newly discovered Internet security flaw could leave many websites vulnerable to hackers because of weak US encryption standards in the 1990s, researchers said Tuesday.&lt;br&gt;&lt;br&gt;The flaw dubbed &quot;FREAK&quot; could leave thousands of websites open to attacks if the problem is not patched, according to papers released by French and US researchers.&lt;br&gt;&lt;br&gt;The flaw was discovered by a team led by Karthikeyan Bhargavan at INRIA in Paris -- the French Institute for Research in Computer Science and Automation -- and disclosure coordinated by Matthew Green, a cryptographer at Johns Hopkins University.&lt;br&gt; A newly discovered Internet security flaw could leave many websites vulnerable to hackers because of weak US encryption standards in the 1990s, researchers said Tuesday ©Thomas Samson (AFP/File)&lt;br&gt; &lt;br&gt;A research paper said the flaw comes from &quot;a class of deliberately weak export cipher suites... introduced under the pressure of US government agencies to ensure that the NSA would be able to decrypt all foreign encrypted communication.&quot;&lt;br&gt;&lt;br&gt;Green said in a blog post that even some sites maintained by the National Security Agency and FBI appeared to be vulnerable.&lt;br&gt;&lt;br&gt;&quot;Since the NSA was the organization that demanded export-grade crypto, it's only fitting that they should be the first site affected by this vulnerability,&quot; Green said.&lt;br&gt;&lt;br&gt;Green and other researchers said the flaw stems from US government-imposed standards for encryption in software that was exported -- a short-lived effort to allow the United States to be able to access software exported to unfriendly regimes.&lt;br&gt;&lt;br&gt;- Part of the software -&lt;br&gt;&lt;br&gt;Even after it became legal to export strong encryption, the export mode feature was not removed from because some software still depended on it, according to Ed Felten, a Princeton University computer science professor.&lt;br&gt;&lt;br&gt;&quot;The flaw is significant in itself, but it is also a good example of what can go wrong when government asks to build weaknesses into security systems,&quot; said Felten in a blog post.&lt;br&gt;&lt;br&gt;&quot;Many web sites are vulnerable to this attack, allowing an adversary in the network to spoof or spy on traffic to vulnerable sites.&quot;&lt;br&gt;&lt;br&gt;Felten said that the vulnerability on the NSA site is &quot;not a big national security problem in itself because NSA doesn't distribute state secrets from its public site. But there is an important lesson here about the consequences of crypto policy decisions.&quot;&lt;br&gt;&lt;br&gt;Green said Facebook's site which operates the &quot;like&quot; button was identified as vulnerable but later patched.&lt;br&gt;&lt;br&gt;Green said the most of the flaws &quot;will soon be patched&quot; but that the flaw is important at a time when the NSA is seeking to maintain access to encrypted software and devices for national security reasons.&lt;br&gt;&lt;br&gt;&quot;The moral of this story is pretty simple: Encryption backdoors will always turn around and bite you in the ass,&quot; he wrote.&lt;br&gt;</div>

Lenora9000