The latest OpenSSL update, which was released on March 1st, fixed, among other bugs, a vulnerability named DROWN.
When WinShock came to light on 11th of November this year, our emergency response team, consisting of members of our IT and R&D departments created a small shell script which allowed remote detection of the vulnerability.
As the title already suggests, the reason for apt-get always re-downloading the package list was a missing Last-Modified header on the server’s end.
We’ve just deployed our new Looking Glass system, which allows you to execute various network-diagnosis tasks directly on systems at our points of presence.