Subscribe
Darn, I thought I dealt with this. So, a couple weeks back news broke about the terrible OpenSSL problem that had caused gobs of easily crackable ssl keys to generated on debian and its derivatives, and I read up on it. Being that this is an ubuntu server, I was vulnerable, so I could have swarn I did an apt-get install openssl and got updated versions and regenerated my keys.
Fast forward to yesterday evening. I got an invite to Heroku and was playing with the git interface. I uploaded by public key, and it told me that I had a blacklisted key and pointed me to the ubuntu security warning.
The removed lines:
MD_Update(&m,buf,j);
[ .. ]
MD_Update(&m,buf,j); /* purify complains */If you didn't hear about the snafu, then you should look into it. If you did, maybe you should look into it again. Took me 10 minutes to fix up 3 bad keys and install the new openssl stuff via apt-get.
(For those who didn't hear: Many moons ago, a line in an openssl file caused a warning in a tool the debian maintainers used. The maintainer removed it, and the complaint went away and everything seemed to work fine. Unfortunately, that line initialized the random number generator. Without that line, every key on a debian system was generated with the random number generator initialized to the process id of the generating program... a tiny, easily bruteforceable set of seeds.)
cosplay :: Fri, 27 Aug 2010 22:21
we're planning on grabbing 3-4 boxes for scaling/static content & backend processing rather than going with a dedicated box.
Works out cheaper too :)
mbt shoes :: Thu, 07 Apr 2011 10:04
It was very useful for me. Keep sharing such ideas in the future as well. This was actually what I was looking for, and I am glad to came here! Thanks for sharing the such information with us
Home Security San Antonio :: Tue, 24 May 2011 06:33
Thank you for give very nice informations. Your web is coolI am impressed by the information that you have on this blog. It shows how well you understand this subject. Bookmarked this page, will come back for more. You, my friend, ROCK! I found just the information I already searched everywhere and just couldn’t find. What a perfect site. Like this website your website is one of my new favs.I like this site presented and it has given me some sort of desire to succeed for some reason, so thank you.
Austin Home Security :: Tue, 24 May 2011 07:07
I love your blog. I’ve added it to my favorite bookmarks and subscribed in a reader. Looking forward to reading more posts by you. Thanks.
verizon promo code :: Sun, 14 Aug 2011 04:28
verizon is a wonderful store with promo codes to save money
Como Ganhar Dinheiro na Internet :: Tue, 06 Sep 2011 14:00
Ohh, very good! Congratulations.
bronchitis contagious :: Thu, 22 Sep 2011 08:54
It was very useful for me. Keep sharing such ideas in the future as well. This was actually what I was looking for, and I am glad to came here! Thanks for sharing the such information with us
gumei :: Thu, 22 Sep 2011 08:54
verizon is a wonderful store with promo codes to save money
home security systems Atlanta :: Sat, 24 Sep 2011 13:52
Thanks this helps.
bankruptcy credit repair :: Mon, 26 Sep 2011 09:59
I had the same openssl problem on a new ubuntu server box.
bmvehgc :: Thu, 27 Oct 2011 16:20
tpnbtlm
viagra :: Thu, 27 Oct 2011 17:18
gjrdxzc http://wefabb.com/ <a href="http://cnqmxg.com/ ">jusjkwzv</a> [url=http://fdikir.com/]jusjkwzv[/url]
viagra :: Thu, 27 Oct 2011 17:42
eidefg <a href="http://rbcuwq.com/ ">sagbup</a>
viagra :: Thu, 27 Oct 2011 17:56
uztfszyi [url=http://skeclr.com/]sjezec[/url]
viagra :: Thu, 27 Oct 2011 18:09
lzntdmmt http://trtszc.com/
VigRX Plus :: Tue, 01 Nov 2011 10:40
Your site is good Actually, i have seen your post and That was very informative and very entertaining for me. Thanks for posting Really Such Things. I should recommend your site to my friends. Cheers.
Penis Enlargement Pills :: Tue, 01 Nov 2011 10:41
This article shares good news regarding to those people who is near the CPT, they will have the attention of medical very quickly.
no credit check payday loans :: Fri, 04 Nov 2011 08:22
llqhwud
levitra :: Mon, 07 Nov 2011 17:27
cxgekk
Eric :: Fri, 11 Nov 2011 18:08
Oh yes, much better! I like! Now it is little bit too simple, but with little tweaks it can be even jkzeksgq better. Good work
order cialis :: Thu, 17 Nov 2011 15:33
eihtjsyu
Ogden security alarm :: Wed, 23 Nov 2011 07:16
This was helpful as we had the same issue in our architecture. You site is quite helpful to our IT team.
Moncler Women Coats :: Mon, 28 Nov 2011 01:14
Moncler Women Coats
Christian Louboutin Sale :: Mon, 28 Nov 2011 01:22
nice post
Moncler Vest Sale :: Mon, 28 Nov 2011 01:29
ok i like it
Moncler Down Jackets :: Mon, 28 Nov 2011 01:36
followed as shorts do look superb with Moncler Down Jackets provided they are flawlessly tailored. Even a Cheap Moncler Sale will also be preferred provided you skip knee highs and avoid socks,long Moncler Mens Coats representing a decent look goes with the atmosphere of a boardroom or Bar Mitzvah only. For rest of your life, hemming your moncler vests men sale will be perfect for your relaxed look. The Mens Moncler Jackets Branson Navy Blue can be bare but if covered with pop colored socks will add a nice touch. http://www.monclermensales.com/
Moncler Mens Jackets :: Mon, 28 Nov 2011 01:48
Although Cheap Moncler Uk stated that the tax system shouldn't pick winners and losers, he contradicted himself with Moncler Jackets Sale. If the government maintains the mortgage interest deduction, as Moncler Mens Jackets wants, then selected winners are those Moncler Coats Uk Online enough to have sufficient income and good credit to obtain a mortgage. Selected Moncler Womens Jackets are anyone who doesn't own a piece of winter jackets and those who've paid off their http://www.moncleruk4sale.com/.
Christian Louboutin Boots :: Mon, 28 Nov 2011 01:57
Christian Louboutin Boots are extremely mechanical inside the procedure of producing or breaking any dressing Discount Christian Louboutin Sale. And no one of us would actually want their respective type to go as Sales Louboutin. And women are especially extra delicate with these problems associated to styling than their Cheap Louboutin Pumps. These Fashion Shoes play a pivotal transfer from transforming a flop model to Christian Louboutin Sandals as they gel correctly even together with your standard Christian Louboutin Booties. So, make sure to play it intelligent on this occasion, go for http://www.saleslouboutinboots.com/ and get prepared to get all these appreciative attentions. For the nba, and for all those nba shoes this year, you can’t go wrong with nba players shoes. Basketball shoes are men’s favorite that never really seem to completely go out of style although cheap nba jerseys can wax and wane as often as the moon. They’re superb in nba shoes sales, but beyond these locations could perhaps not be the finest choice. Still, they do have their place and selected best nba shoes can utilize an outstanding pair of Kobe Bryant Shoes much more effectively than others. But moving beyond these basic carefree Dwight Howard Shoes, there can be plenty of comfy, cool sneakers that are going to http://www.nbaplayerssshoe.com/favored all through the coming year.
ADT :: Tue, 29 Nov 2011 20:13
Best Suggestions ever posted
ADT :: Tue, 29 Nov 2011 20:14
Best Suggestions ever posted to date
louisville home security :: Mon, 05 Dec 2011 18:39
This solved our purpose as well...saves our time we have been spending looking to resolve the similar issue.
cheap cialis :: Thu, 08 Dec 2011 17:17
twnzze
chanel replica :: Tue, 27 Dec 2011 03:11
Digging out crumpled bills out of your pockets probably looked alright when you were in school. But, such a habit doesn’t have a place in the business world. It makes you look unorganized and unreliable. And, in business, you should leave no room for bad impressions. Perhaps you should start investing on men’s wallets.
hermes wallets :: Tue, 27 Dec 2011 03:12
These will definitely make your work life easier for you.And when you’re ready to discard your old faithful “recycle” after one last buff pass it on to charity and let someone else derive pleasure from a piece of well worn leather.Finally “how to care for a wallet” First of all don’t be sold that expensive little container of magic ingredients, being the only type of polish suitable for your new wallet. It’ll cost you a third of the price of the wallet.
hermes kelly wallet :: Tue, 27 Dec 2011 03:12
The truth is most leather care products contain pretty much the same ingredients, so a good quality shoe polish will suffice. All you need is a tin of appropriately coloured shoe polish, one soft brush to apply the polish, another for buffing, a piece of chamois and a tidy bag to store everything in.
home security systems Atlanta :: Sat, 31 Dec 2011 15:22
Thanks for sharing this info on Open SSL.I was looking for this topic for quite a long time.
Sacramento CA Home Security :: Wed, 04 Jan 2012 07:16
This was good to know about SSL. I have forwarded this to my IT team who was looking to grab this knowledge.
axfcao :: Thu, 12 Jan 2012 13:50
wgynaesn
auto loan :: Thu, 19 Jan 2012 06:56
nmengk http://paydayloansinn.co.uk/ Payday Loan =-] <a href="http://paydayloans24x7.net/ ">cash advance</a> >:-[ [url=http://paydayloansinn.com/]payday loan[/url] >:-OOO
buy cialis :: Thu, 26 Jan 2012 23:11
pwwbxo
payday loan :: Sun, 29 Jan 2012 23:17
ixvrqt
sildenafil prices :: Wed, 01 Feb 2012 15:16
wcvmud
payday loans :: Thu, 02 Feb 2012 13:09
uhalqk
cash advance :: Thu, 02 Feb 2012 18:19
gadeaim
cialis :: Fri, 03 Feb 2012 15:04
qcrucy
generic cialis :: Fri, 03 Feb 2012 19:15
cyhblpvx
cialis :: Sat, 04 Feb 2012 00:17
rspihs