[2015-11-24] AWS Cryptographic Encryption Vulnerability A Wake-up Call For Bitco

[jdebunt]

Amazon Web Services is one of the most commonly used cloud platforms in the world. However, as it turns out, the custom encryption and authentication layer was not as secure as originally assumed. A potential weakness has been identified in a code library protecting AWS, despite passing three different external penetration tests.

http://themerkle.com/news/aws-cryptographic-encryption-vulnerability-a-wake-up-call-for-bitcoin-companies/

[cr1776]

Yeah, cloud servers for bitcoin (or other financial) web sites are prone to issues.

Of course if you were to buy a Dell (at least laptop), you'd have to worry about self-signed root certs, so it seems that there are holes everywhere...no comfort there.

See: http://www.techweekeurope.co.uk/security/firewall/superfish-like-rogue-certificates-found-pre-installed-dell-pcs-181034