Tag Archives: fail

VirtualBox 3.2.8 EULA nuclear FAIL

VirtualBox is a good virtualization platform for both Windows and Linux environments. It sometimes happens that I read the EULA (yes yes) of non-free softwares I install. To my surprise, in the VirtualBox 3.2.8 PUEL, it says: ยง 3 Restrictions … Continue reading

Rate this:

Posted in Burger Thoughts, Software | Tagged , , , , , , | Leave a comment

No data encryption for SMB/CIFS

CIFS is very used in big corporate Windows environments, although authentication (generally relying on AD/Kerberos) is good and flexible, there is no built-in support for data transport encryption in CIFS…. bad :(. One solution is to deploy two GPOs on … Continue reading

Rate this:

Posted in Security, Windows | Tagged , , , , , , , , , , , | 1 Comment

Google Chrome security fail – Weak SSL ciphers first!

Google Chrome 3 uses bad security practices by providing SSL/TLS with weak ciphers first: RC4 with MD5 and only then 3DES with SHA1. Chrome does not support AES encryption! Maybe not a security vulnerability, but it is a serious security weakness for Chrome. Continue reading

Rate this:

Posted in bugs, Security | Tagged , , , , , , , , , , , , , , , , , , , , , , , , , | 3 Comments