News

Microsoft’s Schannel Security Update May Have Problems

Software giant Microsoft has issued a warning today based around it’s MS14-066 update which was pushed to consumers late last week. They’ve provided a workaround for those who have already installed the update and are urging all users to avoid or uninstall the update if possible.

This update was designed to fix a critical vulnerability in Schannel, with Microsoft implementing SSL/TLS encryption. This update was previously seen as highly critical by the wider audience with many tech companies and news channels urging users to update immediately. Unfortunately, this update is causing some major issues for some consumers, coming in the form of configurations in which TLS 1.2 is enabled by default and leading negotiations to fail. When the failure occurs, Microsoft and ZDNET has explained:

“TLS 1.2 connections are dropped, processes hang (stop responding), or services become intermittently unresponsive.” There may also be an event ID 36887 in the System event log withe description “A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 40.” ZDNET

The MS14-066 update also contained some new features including four ciphers for TLS. The workaround as given by Microsoft is to delete the following ciphers from your system:

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
TLS_RSA_WITH_AES_256_GCM_SHA384
TLS_RSA_WITH_AES_128_GCM_SHA256

Microsoft has provided a step-by-step process on their official website.

What exactly is happening about this update is somewhat of a grey area, with Microsoft and others reportedly claiming that this update did succeed in protecting the previous mentioned loopholes – but it’s seemingly providing users with more issues than wanted or expected.

Image courtesy of Mashable

Chris Smith

Disqus Comments Loading...

Recent Posts

Trust Gaming GXT 609 Zoxa 2.0 PC Speakers

SOUNDS GREAT – Full stereo sound (12W peak power) gives your setup a booming audio…

3 hours ago

PowerA Wired Controller for Nintendo Switch

Special Edition Yoshi design Ergonomic controller shape with Nintendo Switch button layout Detachable 10ft (3m)…

3 hours ago

Logitech G Saitek PRO Flight Rudder Pedals

Fluid Motion: These flight rudder pedals are smooth and accurate that enable precise control over…

3 hours ago

Logitech G Saitek Farm Sim Controller

Heavy Equipment Bundle: Includes a steering wheel for heavy machinery, gas and brake pedals, and…

3 hours ago

Razer Ornata V3 X – Low Profile Gaming Keyboard

Low-profile Keys for an ergonomic gaming experience. With slimmer keycaps and shorter switches, enjoy natural…

3 hours ago

Glorious Gaming Model O Wired Gaming Mouse

Size & style: Ambidextrous lightweight mouse for gaming. Built for speed, control and comfort, with…

3 hours ago