ICSI Notary @ICSInotary

News from the ICSI SSL Notary Service notary.icsi.berkeley.edu Joined July 2013

Tweets

31
Followers

152
Following

8
Likes

0

TinyToCS @TinyToCS

11 years ago

To Trust, or not to Trust, that is the Question: Structural Properties of X.509 Certificates bit.ly/1KGNEXk

1 5 5 0 0

ICSI Notary @ICSInotary

11 years ago

The ICSI SSL Notary just passed 100 billion observed connections. A happy 2015 to everyone :)

0 6 3 0 0

ICSI Notary @ICSInotary

11 years ago

Today, the paper "The Matter of Heartbleed" will be presented at IMC14. Read how Notary data was used in the paper: notary.icsi.berkeley.edu/2014/11/07/the…

0 6 3 0 0

ICSI Notary @ICSInotary

11 years ago

The Notary will be down tomorrow (2014-20-27) from 10am to 12pm PDT for machine room work.

0 0 0 0 0

ICSI Notary @ICSInotary

11 years ago

Blog post: The SSLv3 #Poodle Attack & current SSL usage statistics from the ICSI SSL Notary: notary.icsi.berkeley.edu/2014/10/16/ssl…

0 7 3 0 0

Dop @dopheide

11 years ago

@Bro_IDS threatpost.com/research-finds…

0 3 0 0 0

ICSI Notary @ICSInotary

12 years ago

GnuTLS exploit test server at gnutls.notary.icsi.berkeley.edu. See update in blog.bro.org/2014/03/dissec…

0 14 7 0 0

ICSI Notary @ICSInotary

12 years ago

@ralphholz @ioerror @remor If they use that kind of cert - in theory, yes. So you could in Snort, Suricat… The certs are very distinctive.

0 0 0 0 0

ICSI Notary @ICSInotary

12 years ago

@ralphholz @ioerror someone in our team wrote this a few months ago to detect for-connections github.com/sethhall/bro-j… cc @remor

0 0 0 0 0

ICSI Notary @ICSInotary

12 years ago

@ralphholz @ioerror we still seem to see them as of a few days ago. We basically go by issuer and subject - they are very unique looking

0 0 0 0 0

ICSI Notary @ICSInotary

12 years ago

@ralphholz @ioerror I am quite sure I looked sometime in the last months and we still seemed to identify them. But let me check...

0 0 0 0 0

ICSI Notary @ICSInotary

12 years ago

@ralphholz do you know exactly when they changed that? Let me re-check that they are not slipping through at the moment...

0 0 0 0 0

ICSI Notary @ICSInotary

12 years ago

@ralphholz yes, we do. A quite simple sql expression seems to take care of the tor certificates for the moment :)

0 0 0 0 0

ICSI Notary @ICSInotary

12 years ago

@ralphholz we also eliminate a huge number of auto generated certificates like used in grid computing

0 0 0 0 0

ICSI Notary @ICSInotary

12 years ago

@ralphholz well, we only see certificates from sites people at our data providers actually access…

0 0 0 0 0

ICSI Notary @ICSInotary

12 years ago

Detailed analysis of the #GnuTLS bug w/ example exploit: blog.bro.org/2014/03/dissec…, so far no matches in our notary

1 23 6 0 0

ICSI Notary @ICSInotary

12 years ago

We just updated notary.icsi.berkeley.edu/#connection-ci… - it now shows the top SSL cipher suites we have seen in the last 30 days (by number of connections)