Episode 410 – Aussie Tech Heads Shownotes

posted in: Show Notes


The vulnerability affects an older type of encryption called Secure Sockets Layer 3 (SSL 3.0), still used by some older web browsers.
When you use online banking and shopping, the ‘s’ in ‘https’ in the website address indicates that encryption is being used to protect your data as it passes between you and the website. Depending on your browser and the website you are visiting, the type of encryption used can vary.
When you connect to a website, your browser and the website will work down through a list of encryption options, from better and newer to older and weaker, until they find one that is compatible.
SSL 3.0 encryption has been outdated for some years, but many websites continue to support it to allow old internet browsers to work with their websites.
The POODLE vulnerability can assist a criminal to intercept and read your SSL 3.0 encrypted information. Using SSL 3.0 is no longer safe.
POODLE is short for Padding Oracle On Downgraded Legacy Encryption, reflecting the technical detail of this vulnerability.
Information about each browser update is below:
Apple Safari: An update was released on 16 October 2014 that addresses the issues (Apple Security Update 2014-005).
Google Chrome: Uses a different function for compatibility for SSL 3.0. Any version of Chrome since February 2014 (Chrome 33 onwards) is protected against this vulnerability.
Microsoft Internet Explorer: An update was released on 15 October 2014 that addresses the issue (Microsoft Security Advisory 3009008).
Mozilla Firefox: Version 34 is expected to be secure against POODLE (expected to be released by late November 2014). A plugin is available until then. Firefox users should install the SSL Version Control plugin choosing default settings.

“Inbox is by the same people who brought you Gmail, but it’s not Gmail: it’s a completely different type of inbox, designed to focus on what really matters,” the company said in a blog post.
Google said Inbox displays real-time updates to emails – for example, showing the delivery status of items bought online.
It also shows reminders in a more accessible way that allows users to more easily keep track of chores and appointments.
The company said the new application also enhances features that are already available in Gmail that allow users to view purchases and bank account statements grouped together.
http://www.google.com/inbox/  and request an invite

Microsoft Azure Australia coming next week
Microsoft has confirmed the long-awaited arrival of its Azure cloud service in Australia, announcing general availability from its Sydney and Melbourne data centres as of next week.

Wozniak has accepted an adjunct professorship at the University of Technology Sydney.
Wozniak has previously been in communication with UTS, providing his insight to students. He is expected to return for his second visit to the UTS city campus in December.

Leave a Reply