#POODLE The New Online Security Risk To Steal Your Private Information - Google

Picture Courtesy blaze.com

Google on Tuesday alerted the general net users of the impending and possible vulnerability called POODLE, in which prowling hacker would be able to steal your details. 

 ''Today we are publishing details of a vulnerability in the design of SSL version 3.0. This vulnerability allows the plaintext of secure connections to be calculated by a network attacker. I discovered this issue in collaboration with Thai Duong and Krzysztof Kotowicz (also Googlers).''  Google said in a blog post, it is a “widespread” threat because it enables prowling hackers to steal your most private information.

''SSL 3.0 is nearly 18 years old, but support for it remains widespread. Most importantly, nearly all browsers support it and, in order to work around bugs in HTTPS servers, browsers will retry failed connections with older protocol versions, including SSL 3.0. Because a network attacker can cause connection failures, they can trigger the use of SSL 3.0 and then exploit this issue.''

Continuing,  ''Google Chrome and our servers have supported TLS_FALLBACK_SCSV since February and thus we have good evidence that it can be used without compatibility problems. Additionally, Google Chrome will begin testing changes today that disable the fallback to SSL 3.0. This change will break some sites and those sites will need to be updated quickly.''

''In the coming months, we hope to remove support for SSL 3.0 completely from our client products.''