Tutorials

Tutorials

Tutorials

Patching GHOST on My Tiny Droplet

A walkthrough of patching the GHOST glibc vulnerability on a self-hosted VPS, plus some grumbling about rebooting a server with 400 days of uptime.

January 30, 2015 · 3 min read

Tutorials

Finally Killing SSLv3 On This Server

A weekend chore I put off for a week and a half: patching SSLv3 out of this blog's nginx config after the POODLE disclosure, with the actual lines I changed.

October 24, 2014 · 3 min read

Tutorials

Patching Around POODLE

Google's security team disclosed the POODLE SSLv3 vulnerability this week, and it cost me an evening patching nginx. Here's the one-line fix and why the browser vendors' response matters more than yours.

October 18, 2014 · 3 min read

Tutorials

Killing SSLv3 Before Bed

Google's POODLE disclosure means it's time to kill SSLv3 on your servers — here's the quick Apache and nginx fix, plus why 2014 has felt like one long string of vulnerability patches.

October 15, 2014 · 3 min read