ASP.NET Padding Oracle fix released, time to patch for Windows administrators

By tim, on September 28th, 2010 Follow tim on Twitter

Scott Guthrie’s blog reports that a fix is now available for the Padding Oracle attack, which enables successful attackers to break the security of ASP.NET applications. There are a few points of interest.

First, there is not one patch but several, and which ones you need depend both on the version of Windows and the

…continue reading ASP.NET Padding Oracle fix released, time to patch for Windows administrators

September 28th, 2010 | Tags: , , , | Category: .net, microsoft, professional | Leave a comment

Crisis for ASP.Net – how serious is the Padding Oracle attack?

By tim, on September 21st, 2010 Follow tim on Twitter

Security vulnerabilities are reported constantly, but some have more impact than others. The one that came into prominence last weekend (though it had actually been revealed several months ago) strikes me as potentially high impact. Colourfully named the Padding Oracle attack, it was explained and demonstrated at the ekoparty security conference. In particular, the researchers

…continue reading Crisis for ASP.Net – how serious is the Padding Oracle attack?

September 21st, 2010 | Tags: , , , , , | Category: microsoft, professional, Web | 6 comments