Net It On Blog

Net It On has been serving the Hackensack area since 2005, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

Microsoft Fixes Dangerous POODLE SSL Vulnerability

b2ap3_thumbnail_Poodles_400.jpgA while back we discussed the POODLE vulnerability found in SSL 3.0 SSL encryption technology. This vulnerability is found in all operating systems, as it is found within the web browser’s abilities to process SSL encryption. Thankfully, major companies are stepping up to tackle the issue, and Microsoft has released a basic solution to fix the vulnerability in Internet Explorer.

The POODLE vulnerability itself is used to obtain information encrypted with SSL technology by analyzing web traffic. This technique is used to steal information such as credit card numbers, Social Security numbers or other private information. In non-tech speak, SSL (Secure Socket Layers) is an encryption protocol used to keep data safe on the web through security certificates. This method of encryption has long since been replaced by the more secure protocol TLS (Transport Layer Security), but several systems will revert back to their old SSL certificates in the event something has gone wrong with their TLS. TLS isn’t vulnerable to this issue, so in theory, a hacker could force their way into a network, exploiting the traffic coming in and out of the network for any worthwhile information.

According to the Microsoft security advisory, hackers exploit a man-in-the-middle attack to take advantage of this vulnerability:

In a man-in-the-middle (MiTM) attack, an attacker could downgrade an encrypted TLS session forcing clients to use SSL 3.0 and then force the browser to execute malicious code. This code sends several requests to a target HTTPS website, where cookies are sent automatically if a previous authenticated session exists. This is a required condition in order to exploit this vulnerability. The attacker could then intercept this HTTPS traffic, and by exploiting a weakness in the CBC block cipher in SSL 3.0, could decrypt portions of the encrypted traffic (e.g. authentication cookies).

Due to the nature of POODLE as a design flaw, it’s not something that can easily be patched. Therefore, most experts are saying that you’re better off disabling SSL 3.0 for their web browsers. Most servers don’t rely on SSL 3.0 anymore, which makes it obsolete. In fact, most major browsers are looking to disable SSL 3.0 completely within the next few months. Firefox is fixing the issue with the November upgrade, while Google is working to disable SSL 3.0 on all of its products. This makes the vulnerability obsolete for two of the biggest browsers, but what about Internet Explorer?

Turns out Microsoft has a way to fix that one, too. Microsoft has released a Fix It tool, which can help users disable SSL 3.0 without navigating through their Control Panel. Just click here for the tool on their official website. Otherwise, you must disable SSL 3.0 and enable TLS 1.0, 1.1, and 1.2. Follow these steps to do so:

poodle in blog 1

In the Internet Explorer Tools menu (or your PC’s Control Panel), click Internet Options.

poodle in blog 2

In the Internet Options window, click the Advanced tab.

poodle in blog 3

Scroll down to the Security section. Notice there are checkboxes next to the available SSL and TLS options. Uncheck Use SSL 3.0, and check the following: TLS 1.0, TLS 1.1, and TLS 1.2. Be sure to check all of the TLS versions. Failing to do so could result in connection errors.

Finally, click OK, exit, and restart Internet Explorer. This allows Internet Explorer to refuse a connection with any servers which only support SSL, which ensures that the web traffic isn’t vulnerable to the POODLE vulnerability.

Net It On believes that quality security is key to a minimal-risk online environment. This fix isn’t a viable replacement for the latest security updates and patches, so you will want to ensure that you are always running the most up-to-date versions of your software, applications, and especially your operating system.

Net It On can apply all of these patches for your business’s systems so you don’t have to. Call us today at (732) 360-2999 to learn more.

Comments 21

 
fuzail faisal on Tuesday, 13 November 2018 05:57

I was surfing the Internet for information and came across your blog. I am impressed by the information you have on this blog. It shows how well you understand this subject. read here

I was surfing the Internet for information and came across your blog. I am impressed by the information you have on this blog. It shows how well you understand this subject. [url=https://searchenginewatch.com/sew/news/2047853/goole-paid-listings-premium-sponsorships-adwords]read here[/url]
Anna Sally on Saturday, 17 November 2018 07:58

It proved to be Very helpful to me and I am sure to all the commentators here! why not try these out

It proved to be Very helpful to me and I am sure to all the commentators here! [url=http://555go.info/]why not try these out[/url]
fuzail faisal on Saturday, 17 November 2018 09:29

No doubt this is an excellent post I got a lot of knowledge after reading good luck. Theme of blog is excellent there is almost everything to read, Brilliant post. Garden Trade Directory

No doubt this is an excellent post I got a lot of knowledge after reading good luck. Theme of blog is excellent there is almost everything to read, Brilliant post. [url=https://www.findtheneedle.co.uk/]Garden Trade Directory[/url]
fuzail faisal on Monday, 19 November 2018 07:55

I hired a company, for professional safety playgrounds, I was recommended by a friend to hire 토토 and I can't be happier with the choice I made. Make your decision wisely and hire this company for sure.

I hired a company, for professional safety playgrounds, I was recommended by a friend to hire [url=https://moontoto.com/]토토[/url] and I can't be happier with the choice I made. Make your decision wisely and hire this company for sure.
Anna Sally on Thursday, 22 November 2018 13:59

This is very educational content and written well for a change. It's nice to see that some people still understand how to write a quality post.! paytm cashback offers

This is very educational content and written well for a change. It's nice to see that some people still understand how to write a quality post.! paytm cashback offers
fuzail faisal on Wednesday, 28 November 2018 07:14

Most of the time I don’t make comments on websites, but I'd like to say that this article really forced me to do so. Really nice post! steroid

Most of the time I don’t make comments on websites, but I'd like to say that this article really forced me to do so. Really nice post! [url=https://www.steroid-life.eu/]steroid[/url]
fareedy shakir on Saturday, 01 December 2018 11:25

Hey what a brilliant post I have come across and believe me I have been searching out for this similar kind of post for past a week and hardly came across this. Thank you very much and will look for more postings from you. Pfandhaus Duisburg

Hey what a brilliant post I have come across and believe me I have been searching out for this similar kind of post for past a week and hardly came across this. Thank you very much and will look for more postings from you. Pfandhaus Duisburg
fareedy shakir on Saturday, 01 December 2018 11:26

Hey what a brilliant post I have come across and believe me I have been searching out for this similar kind of post for past a week and hardly came across this. Thank you very much and will look for more postings from you. Pfandhaus Duisburg

Hey what a brilliant post I have come across and believe me I have been searching out for this similar kind of post for past a week and hardly came across this. Thank you very much and will look for more postings from you. [url=https://issuu.com/pfandhaus]Pfandhaus Duisburg[/url]
Anna Sally on Monday, 03 December 2018 08:20

You make so many great points here that I read your article a couple of times. Your views are in accordance with my own for the most part. This is great content for your readers. Minoxidil dht Blockers

You make so many great points here that I read your article a couple of times. Your views are in accordance with my own for the most part. This is great content for your readers. [url=https://hairlossdhtshampoo.com]Minoxidil dht Blockers[/url]
fuzail faisal on Thursday, 06 December 2018 11:52

This is such a great resource that you are providing and you give it away for free. I love seeing blog that understand the value. Im glad to have found this post as its such an interesting one! I am always on the lookout for quality posts and articles so i suppose im lucky to have found this! I hope you will be adding more in the future... solarmovies

This is such a great resource that you are providing and you give it away for free. I love seeing blog that understand the value. Im glad to have found this post as its such an interesting one! I am always on the lookout for quality posts and articles so i suppose im lucky to have found this! I hope you will be adding more in the future... [url=https://csolarmovie.com/]solarmovies[/url]
fuzail faisal on Thursday, 13 December 2018 07:48

I think this is a really good article. You make this information interesting and engaging. You give readers a lot to think about and I appreciate that kind of writing. Women's sunglasses

I think this is a really good article. You make this information interesting and engaging. You give readers a lot to think about and I appreciate that kind of writing. [url=https://www.salanty.com/]Women's sunglasses[/url]
fuzail faisal on Saturday, 15 December 2018 06:42

Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work. legal steroids for women

Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work. [url=https://steroidreviewer.com/anvarol-pills-for-women/]legal steroids for women[/url]
fuzail faisal on Tuesday, 25 December 2018 09:17

It was the wee hours at the night; I was driving my friend from Jaipur to Delhi. On the way, as soon as we reached Gurgaon expressway, super smooth road and bright street light welcomed us. I proudly informed my friend that my office is located at the heart of Gurgram to which she gave an amazed facial expression Real Estate Company in Delhi

It was the wee hours at the night; I was driving my friend from Jaipur to Delhi. On the way, as soon as we reached Gurgaon expressway, super smooth road and bright street light welcomed us. I proudly informed my friend that my office is located at the heart of Gurgram to which she gave an amazed facial expression [url=https://blog.rajdarbarrealty.com/2018/10/22/gurugram-the-uber-cool-place-to-work/]Real Estate Company in Delhi[/url]
fuzail faisal on Friday, 28 December 2018 07:27

Thank you a bunch for sharing this with all of us you actually realize what you are talking about! Bookmarked. Please also seek advice from my site =). We could have a hyperlink change contract between us! voyance retour amour

Thank you a bunch for sharing this with all of us you actually realize what you are talking about! Bookmarked. Please also seek advice from my site =). We could have a hyperlink change contract between us! [url=http://voyance-retour-amour.com/]voyance retour amour[/url]
fuzail faisal on Saturday, 29 December 2018 08:28

I read your blog frequently and I just thought I’d say keep up the amazing work! click here

I read your blog frequently and I just thought I’d say keep up the amazing work! [url=https://thehealthlinkk.wordpress.com/2018/12/28/narrow-calf-boots/]click here[/url]
Stephen Mccormick on Monday, 31 December 2018 09:03

Thanks for taking the time to discuss this, I feel strongly about it and love learning more on this topic. recommended you read

Thanks for taking the time to discuss this, I feel strongly about it and love learning more on this topic. [url=https://challenges.openideo.com/profiles/dtvryfxa]recommended you read[/url]
Stephen Mccormick on Thursday, 03 January 2019 07:01

I wanted to thank you for this excellent read!! I definitely loved every little bit of it. I have you bookmarked your site to check out the new stuff you post. 123Movies

I wanted to thank you for this excellent read!! I definitely loved every little bit of it. I have you bookmarked your site to check out the new stuff you post. [url=https://rohitink.com/2018/12/31/123movies-keyword-targeted-many-webmasters/]123Movies[/url]
Stephen Mccormick on Saturday, 05 January 2019 08:54

Yes i am totally agreed with this article and i just want say that this article is very nice and very informative article.I will make sure to be reading your blog more. You made a good point but I can't help but wonder, what about the other side? !!!!!!THANKS!!!!!! Missouri rv dealer

Yes i am totally agreed with this article and i just want say that this article is very nice and very informative article.I will make sure to be reading your blog more. You made a good point but I can't help but wonder, what about the other side? !!!!!!THANKS!!!!!! [url=https://www.midamericarv.com/used-rvs-for-sale-missouri--xPreOwnedInventory]Missouri rv dealer[/url]
amazing amazing on Tuesday, 08 January 2019 08:13

Thank you for some other informative website. The place else may just I get that kind of information written in such a perfect method? I have a venture that I am simply now running on, and I’ve been at the glance out for such info.
windstream speed test

Thank you for some other informative website. The place else may just I get that kind of information written in such a perfect method? I have a venture that I am simply now running on, and I’ve been at the glance out for such info. [url=https://www.speedcheckonline.com/speed-test/]windstream speed test[/url]
fareedy shakir on Monday, 04 February 2019 08:51

Thumbs up guys your doing a really good job.코인카지노

Thumbs up guys your doing a really good job.[url=https://bbdevtt.com/coincasino/]코인카지노[/url]
Already Registered? Login Here
Guest
Thursday, 02 April 2020
If you'd like to register, please fill in the username, password and name fields.

Search

Sign Up for Our Newsletter

  • First Name *
  • Last Name *

      Mobile? Grab this Article!

      QR-Code dieser Seite
      More Info

      Latest News

      Net It On launches new website!

      Net It On is proud to announce the launch of our new website at http://www.netiton.com. The goal of the new website is to make it easier for our existing clients to submit and manage support requests, and provide more information about our services for prospective clients.

      Read more...

      Contact Us

      Learn more about what Net It On can do for your business.

      Call Us Today

      Call us today    (732) 360-2999

      58 Main St
      Hackensack, New Jersey 07601

      View our Facebook Page twitter Subscribe to our Blog linkedin