![\"protecting_yourself_from_freak\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/03\/protecting_yourself_from_freak-300x225.jpg\")
There\u2019s a new SSL security flaw that\u2019s making the news, and as usual, it has the major tech companies scrambling to provide patches. In some cases, patches are available now. In others, they\u2019re still about a week away. Here\u2019s what you need to know and how to guard against it.<\/p>\n
Background<\/strong><\/p>\n This latest security flaw is actually quite old, but only recently discovered. Essentially, this is an artifact of an earlier era in computing. As our security measures have grown more robust new architecture has been built atop the old, without stripping the old out. This, of course, has set up a situation where a savvy, observant hacker can exploit the old code that\u2019s still built into the system, completely circumventing the new, more robust security measures.<\/p>\n Scope of Impact<\/strong><\/p>\n Originally, this was reported as an Apple issue, but it has since come to light that Microsoft and Android devices are impacted as well. In fact, most devices are impacted, including those running Windows Vista, 7, 8, 8.1, and Windows Server 2003. It stands to reason that older and unsupported operating systems are also vulnerable. It\u2019s all the more reason to do that upgrade you\u2019ve been putting off, because in the case of unsupported OS\u2019s, no help is coming. If you don\u2019t upgrade, you\u2019re going to remain vulnerable to the threat this newly revealed security flaw represents.<\/p>\n In addition to these, the Android browser is vulnerable, as is Internet Explorer, pre-update-41 Chrome, and Opera. Patches are all forthcoming, but at present, the safe havens are Chrome 41 and Firefox. Switch to either of these until the other patches are officially released.<\/p>\n Also note that if you\u2019re using Server 2012 or Server 2008, but have those configured for desktop use, you\u2019re also vulnerable. Tablet and Phablet users will need to wait for the manufacturer to release patches before they\u2019re fully covered, even after Google patches the Android OS.<\/p>\n All of that to say, this is a very big, pervasive security flaw that impacts an enormous number of machines.<\/p>\n