Re: CERT Advisory: #144389 Return of Bleichenbacher's Oracle Threat (ROBOT) -- MIDRANGE-L

Subject: Re: CERT Advisory: #144389 Return of Bleichenbacher's Oracle Threat (ROBOT)
From: Nathan Andelin <nandelin@xxxxxxxxx>
Date: Wed, 3 Jan 2018 13:16:06 -0700
List-archive: <https://archive.midrange.com/midrange-l/>
List-help: <mailto:midrange-l-request@midrange.com?subject=help>
List-id: Midrange Systems Technical Discussion <midrange-l.midrange.com>
List-post: <mailto:midrange-l@midrange.com>
List-subscribe: <https://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@midrange.com?subject=subscribe>
List-unsubscribe: <https://lists.midrange.com/mailman/options/midrange-l>, <mailto:midrange-l-request@midrange.com?subject=unsubscribe>

IBM's initial response is that the IBMi is NOT VULNERABLE to this style
padding attack.

That may be true. IBM's implementation may not be vulnerable. But I don't
see that stopping the security watch dogs from barking an otherwise making
a nuisance. A pity when you get a bad rap from your customers or your
competition claiming that your web interfaces are vulnerable.

As an Amazon Associate we earn from qualifying purchases.

Follow-Ups:

Re: CERT Advisory: #144389 Return of Bleichenbacher's Oracle Threat (ROBOT) , Rob Berendt

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.