« previous next »
Pages: [1]   Go Down

Author Topic: Funny this particular site is being flagged for Heartbleed SSL bug!  (Read 1205 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33902
  • malware fighter
Funny this particular site is being flagged for Heartbleed SSL bug!
« on: April 19, 2014, 06:38:47 PM »
See: -https://www.dns-oarc.net/oarc/services/porttest  The domain could be vulnerable to the Heartbleed SSL bug says ChromeBleed exztension.
This being confirmed with this report: http://toolbar.netcraft.com/site_report?url=https://www.dns-oarc.net
DNS-OARC back to do your homework, guys!
Verdict: The site offered the Heartbeat TLS extension prior to the Heartbleed disclosure, and is still using the same certificate.
So I gonna wait a little to take a  DNS Resolver(s) Test there  ;)
Moreover while the server is spreading excessive header information both to the world and potential attackers.
See: http://fetch.scritch.org/%2Bfetch/?url=https%3A%2F%2Fwww.dns-oarc.net&useragent=Fetch+useragent&accept_encoding=

polonus
« Last Edit: April 19, 2014, 06:51:42 PM by polonus »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »