TLSv1 encryption hacked

[JPC-Nazmy]

according to a recent whitepaper published here :
Hackers break SSL encryption used by millions of sites • The Register

As mentioned :

The vulnerability resides in versions 1.0 and earlier of TLS, or transport layer security, the successor to the secure sockets layer technology that serves as the internet's foundation of trust. Although versions 1.1 and 1.2 of TLS aren't susceptible, they remain almost entirely unsupported in browsers and websites alike, making encrypted transactions on PayPal, GMail, and just about every other website vulnerable to eavesdropping by hackers who are able to control the connection between the end user and the website he's visiting.

This is mainly a browser side hack so please open your browser(s) settings and remove the support for TLSv1.0 in encryptions/advanced tab

[JPC-Misty]

In Chrome this is under Options>Under the Hood>HTTPS/SSL>Uncheck Use TLS 1.0.

[JPC-Nazmy]

We are currently upgrading apache on all servers to overcome this security weakness in TLS and also applying more fixes to block new hackers attack techniques .

As for this SSL attack you can follow this steps to make sure your data isn't sniffed online :

1- Close all your browser (all open windows/tabs)

2- Open your browser and go directly to the desired secure site without connecting to any insecure sites first.

OR

1- make your homepage that opens when you start your browser a secure page example https://gmail.com

2- Put bookmarks to frequently visited secure web sites on your desktop, so when you click on them your browser is opened and you go directly to that secure page.

3- Disable JavaScript in your browser. Alternately, configure your browser to only allow JavaScript with specific trusted secure sites.

4- Use a VPN (virtual private network). If you connect your computer to a network you do trust (like work), this sends all your secure and insecure web connections over the VPN bypassing any ability of a malicious person in your local network from viewing or interfering with any of your web browsing.

5- Separate your usage for secured sites on a different browser example : normal sites on Internet Explorer and secured sites on FireFox.

Hope this cleared up the issue and any questions are welcomed .