D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] OpenSSL 1.0.1 "Heartbleed" vulnerability

 

On Tue, Apr 08, 2014 at 05:04:27PM +0100, bad apple wrote:
> Gah... that was entirely my fault: between noscript and request-policy,
> I hadn't seen it (it wasn't loading) on the page. Had to enable some
> blogger* cross domain requests and up it popped. Sorry about that.

Here's an actual proof-of-concept: https://www.mattslifebytes.com/?p=533

It works.

Martijn.


-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq