• OpenSSL Heartbleed bug – a quick explanation on the recent security issue and the fix

    Heartbleed is a recently discovered small bug that relates to the OpenSSL’s implementation of the TLS ‘heartbeat’ mechanism. The bug is present only in the OpenSSL versions 1.0.1 through 1.0.1f! By exploiting this bug, an attacker can request that a running TLS server hand over a relatively large slice (up to 64KB) of its private memory space. Since this is the same memory space where OpenSSL also stores the server’s private key material, an attacker can potentially obtain data such as: 1) private keys 2) TLS session keys 3) confidential data 4) session ticket keys. The remedy You can test […]

     
  • Ubuntu 8.04 alternative repositories – “Failed to fetch” error

    Since Ubuntu 8.04 is no longer supported, the original repositories no longer work. Ubuntu users will get an error like: Err http://mirrors.xx.com hardy/universe mc 1:4.6.1-8ubuntu1 404 Not Found [IP: xx.xx.xx.xx] Failed to fetch http://mirrors.xx.com/ubuntu/pool/universe/m/mc/mc_4.6.1-8ubuntu1_amd64.deb 404 Not Found [IP: xx.xx.xx.xx 80] E: Unable to fetch some archives, maybe run apt-get update or try with –fix-missing? Or from Plesk: Failed to fetch http://mirrors.xxx.com//ubuntu/dists/hardy/main/binary-amd64/Packages 404 Not Found [IP: xx… Ubuntu 8.04 users should upgrade to the latest version but in case that for whatever reason, this is not an option for them, they can try these: # Required deb http://old-releases.ubuntu.com/ubuntu/ karmic main restricted […]