SSLv3 – Poodle Attack
Researchers at Google has discover a new attack on the SSLv3 protocol, which takes advantage of an issue with the protocol that enables a network attacker to recover the plain text communications of the victim.
The attack is known as POODLE. The technique takes advantage of the fact that when a secure communication attempts fails, servers will fall back to older protocols such as SSLv3, in an attempt to continue communication with the remote client/server. An attacker who can trigger a connection failure can then force the use of SSLv3 and attempt the attack.
The easiest fix for the attack is to disable SSLv3, but that has compatibility implications for browsers especially older ones. Recommended response is to support TLS_FALLBACK_SCSV. This is a mechanism that solves the problems caused by retrying failed connections and thus prevent attackers from inducing browsers to use SSLv3. It also prevents downgrades from TLS 1.2 to 1.1 or 1.0.
This new attacks affects a wide range of software, including OpenSSL.
Firefox is planning to turn of SSLv3. As per firefox updates there is only 0.3% of https uses SSLv3. An SSLv3 will be disabled by default in Firefox34 which is expected to release on Nov 25.
USB Type-C Connector Ready for Production
USB 3.0 Promoter group has released it’s new USB Type-C specification. The USB Type-C specification establishes a new cable and connector scheme tailored to fit mobile device product designs, yet robust enough for laptops and tablets.
The USB Type-C specification defines the physical USB Type-C cable and connector form factor along with the functional requirements for detecting and managing USB connections over an extensible wiring architecture. This new cable and connector supports USB performance at SuperSpeed USB 10 Gbps (USB 3.1) and USB Power Delivery up to 100W.
Key characteristics of the USB Type-C connector include:
- Entirely new design.
- Tailored for emerging product designs.
- Robust enough for laptops and tablets; slim enough for mobile phones.
- Similar to size of USB 2.0 Micro-B.
- Usability enhancements.
- Reversible plug orientation and cable direction.
- Supports scalable power charging.
- Future scalability.
- Designed to support future USB performance needs.
- Mechanical specs:
- Receptacle opening: ~8.4mm x ~2.6mm.
- Durability: 10,000 cycles.
- Improved EMI- and RFI-mitigation features.
- Power delivery capacity: 3A for standard cables and 5A for connectors
About the USB 3.0 Promoter Group
The USB 3.0 Promoter Group, comprised of Hewlett-Packard Company, Intel Corporation, Microsoft Corporation, Renesas Electronics, STMicroelectronics and Texas Instruments, developed the USB 3.1 Specification that was released in July 2013. In addition to maintaining and enhancing this specification, the USB 3.0 Promoter Group develops specification addendums to extend or adapt its specifications to support more platform types or use cases where adopting USB 3.1 technology will be beneficial in delivering a more ubiquitous, richer user experience
Microsoft working on a new version of IE
These features and others are listed on the newly updated status.modern.ie site, on which Microsoft lists a whole bunch of up-and-coming Web standards and its attitude towards them.
Honda Made the World’s First Smartphone Case With an Emergency Airbag
It looks like Honda has create a Smartphone Case with an emergency Airbag, Watch this cool video.