Microsoft Patches Windows Flaw From The 1990’s

Microsoft Patches Windows Flaw From The 1990’s

Late last year, we posted an article about Microsoft finally patching an 18 year old vulnerability. With a certain sense of deja vu… Microsoft patched another vulnerability that dates back to the 1990’s earlier this week. The flaw is known as FREAK (factoring RSA export keys) and it was included in web browsers as part of US government policy. Recently, a team of researchers concluded this “policy” has cause a severe exploit which affects millions of computing systems from PCs to smartphones.

Essentially, the flaw allows an attacker to compromise secure websites by factoring the RSA private key used to secure the transaction. Internet Explorer on Windows had to be patched to prevent this attack. It affects more than just Windows, but its always good to see Microsoft getting these patches out there. To find out if your computing system is vulnerable, visit the FREAK test page.

About the Author

avatar KALE: A geek who works in the IT Security field and lives in Dallas, TX. He is also a music geek who has played in several local bands. Previous to his IT career, Kale worked as a photojournalist. He brings technical advice and artistic counterpoint to the podcast.