Tech Tips Home
The Best Tech Tips And Daily Deals
Newsletter On The Internet!

WorldStart Tech Tip And Store Search
Email: Password: Login Remember Me
looking for freeware

Like what you see here? Subscribe to the Tech Tips newsletter!   Email: Subscribe

Protect Yourself Against POODLE SSLv3 Attack

Friday, October 24th, 2014 by | Filed Under: Security Help
 
Loading...


Once again, there’s another attack that can compromise your information. This time it’s called POODLE.

Attackers go after SSLv3, an older Internet security protocol. While most websites have moved on to newer versions, this attack can actually trick sites into downgrading to SSLv3, making the site vulnerable to attack.

SSL protect encrypted data like passwords, credit card information and account details. If that encryption is cracked, you information is vulnerable.

Here’s how to protect yourself. First, check your browser to find out if SSLv3 is enabled. Follow this link. If it’s enabled, you’ll see this warning at the top of the screen.

For Internet Explorer, you’ll need to go to Settings and then Internet Options.

Click the Advanced Tab and then scroll down to Use SSL 3.0. If the box beside that option is checked, uncheck it.  Click okay. This will only work on Internet Explorer 9 and above. If you are running an older version, upgrade. If you can’t upgrade, that mean you’re running XP and have no business online anyway.

It’s a little bit more of a process with Firefox and Chrome.

For Firefox, you’ll need to open the browser and type about:config into the address bar and hit enter.

You’ll see this warning. Click on I’ll be careful, I promise!

Type  security.tls.version.min into the search box then double-click on it in the results.

You’ll see this box. Change the number in the box from 0 to 1 and select OK.  This will force Firefox to use protocols that are not vulnerable to POODLE.

For Google Chrome, you can’t disable SSLv3, but you can add a command line to make sure it choose a protocol not vulnerable to POODLE.

Right click on your icon for Chrome and choose Properties.

Click the Shortcut tab and carefully arrow your way to the end of the text in the Target field.

You are going to be adding --ssl-version-min=tls1 to the end of that line. Note the space between the quotation mark and the first dash.  Choose OK and restart your browser.

~ Cynthia

Tags: , , , , ,

6 Responses to “Protect Yourself Against POODLE SSLv3 Attack”

  1. Cindy says:

    How do you implement the safeguards for POODLE on tablets/e-readers/Ipads?

  2. kathy says:

    Thanks! As you described is what I found so I followed your instructions. The question is, what would have happened if I didn’t receive your newsletter? How else would I have learned about POODLE and what to do about it?

  3. Diane says:

    How do you safeguard against POODLE on a smartphone?

  4. bill says:

    it applied fine with IE and firefox but i got an invalid target message with chrome. any other info that might help?

  5. bill says:

    never mine, i did it a second time and it worked :-)

  6. Jane says:

    I have Internet Explorer 11. I uncheck the box for SSL and click OK, but when I look the next day or so, it is checked again. This has been going on for a few weeks now. Any suggestions?

Leave a Reply


Like these tips? Get them for FREE in your email!

WorldStart's Tech Tips Newsletter

  • Tech Tips Daily - Become a tech pro! Get the very best tech and computer help sent directly to your email every weekday!

  • Tech Tips Weekly - If you don't want our Tech Tips newsletter every day, then sign up for this weekly newsletter to get the best information of the week. Sent on Fridays.

Other Newsletters

  • WorldStart's Daily Deals - Every week, we send out great deals in our Daily Deals newsletter. Many of these deals are exclusively for our Daily Deals newsletter subscribers and can't be found with our regular specials.

  • Just For Grins - Each issue includes a couple clean jokes, some funny quotes, and a hilarious reader's story. Newsletter is sent five days a week.


Enter Email Address:

Subscribe

Your e-mail address is safe with us!
We only use it to send you the newsletters you request. It is NEVER disclosed to a third party for any reason, ever! Plus, if you decided you don't like our newsletters (don't worry, you'll love them), unsubscribing is fast and easy.

Free Newsletter Signup



Tech Tips Daily

Become a tech pro! Get the very best tech and computer help sent directly to your email every weekday!

Tech Tips Weekly

The week's best in tech and computer help. Get your issue sent to your email every Friday!

WorldStart's Daily Deals

The very best deals on the Internet! Get a new set of incredible sales every day of the week!

Just For Grins

Clean jokes, funny quotes, and hilarious comics. Sent 5 times a week straight to your email.


Subscribe


Love Worldstart? Refer A Friend!

looking for freeware
WorldStart's Premium Membership

Tip Archive


Categories:
Archives: