Citrix swats Sweet32 bug by just turning off old ciphers Citrix has pushed back a little against the dangers posed to its users by the Sweet32 “birthday attack” against old ciphers. The attack, published in late August, is a birthday attack against 64-bit ciphers like Blowfish and Triple DES. That's prompted various vendors to get patching, but as Citrix explains in this blog post …
Your post holds for about every single patch, but it can't be stressed enough.
Theoretical patch/updateability may actually be counter-productive where it really matters, because it may be an incentive to carelessness or cost cutting at release while critical systems often cannot "just update" without considerable costs and interrupting service. Ianal, but something might need to be recertified, years and milions spent.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
