Gene Diaz genediazjr

[Google recently announced][poodle] that there is an exploit in SSLv3, this vulnerability is know as POODLE. There is no other option than to disable SSLv3 in order to combat this major flaw. There have already been [guides on how to disable this in different servers][guides]. But nothing excised for Node.js yet, until now. In order to resolve this for Node.js we need to use various of undocumented options and modules.

In the index.js file below you can see an example of how you can protect your HTTPS server against the POODLE attack. It uses the secureOptions option to pass in constants in to the SSL context which is created by node.

Setup

Launch Cmder

Right-click on the console tab
Select New Console... to launch the ConEmu console create dialog

In the New Console Split section, select the To right radio option click the Start button

Congrats, you now have a half-n-half or 50-50 horizontal split!

The Ultimate Unit Testing Cheat-sheet

Sinon Chai
Chai
Sinon

	# Change YOUR_TOKEN to your prerender token
	# Change example.com (server_name) to your website url
	# Change /path/to/your/root to the correct value

	server {
	listen 80;
	server_name example.com;

	root /path/to/your/root;
	index index.html;

	--strict
	--jsdoc
	--summary
	--beep
	--check_html
	--nomultiprocess
	--debug_indentation
	--time

	# ---------------------------------------------------------------------------
	#
	# Description: This file holds all my BASH configurations and aliases
	#
	# Sections:
	# 1. Environment Configuration
	# 2. Make Terminal Better (remapping defaults and adding functionality)
	# 3. File and Folder Management
	# 4. Searching
	# 5. Process Management

	# This is an example of the Stack Exchange Tier 1 HAProxy config
	# The only things that have been changed from what we are running are:
	# 1. User names have been removed
	# 2. All Passwords have been remove
	# 3. IPs have been changed to use the example/documentation ranges
	# 4. Rate limit numbers have been changed to randome numbers, don't read into them

	userlist stats-auth
	group admin users $admin_user
	user $admin_user insecure-password $some_password

	var crypto = require('crypto');

	// larger numbers mean better security, less
	var config = {
	// size of the generated hash
	hashBytes: 32,
	// larger salt means hashed passwords are more resistant to rainbow table, but
	// you get diminishing returns pretty fast
	saltBytes: 16,
	// more iterations means an attacker has to take longer to brute force an

	#!/usr/bin/env python

	import sys
	try:
	import binaryninja
	except ImportError:
	sys.path.append("/Applications/Binary Ninja.app/Contents/Resources/python/")
	import binaryninja
	import time
	import socket