Heartbleed attack leaves 2/3 web vulnerable

[rockking1379]

just saw this, pretty scary.

 

http://arstechnica.com/security/2014/04/critical-crypto-bug-in-openssl-opens-two-thirds-of-the-web-to-eavesdropping/

 

tread lightly folks!

 

-rock

 

edit:

 

found the online test tool, looks like linustechtips.com is safe

 

https://twitter.com/rockking1234567/status/453568540872695808/photo/1

[flibberdipper]

This is not good. Especially where I spend a lot of time on the internet...

[rockking1379]

This is not good. Especially where I spend a lot of time on the internet...

same here. kinda makes me wonder if NSA didn't have something to do with this. yeah its OpenSSL but seriously? this is a really old bug.

 

http://news.softpedia.com/news/Tens-of-Alexa-Top-1-000-Websites-Vulnerable-to-Heartbleed-Attacks-436482.shtml?utm_source=dlvr.it&utm_medium=twitter

 

this is also an interesting read

[rockking1379]

https://github.com/musalbas/heartbleed-masstest/blob/master/top1000.txt

 

we aren't a top site but hey still interesting to see who is vulnerable and who isn't

[The_Strict_Nein]

Well, at least paypal is unaffected, I was looking to buy some ebay stuff.

 

Got my eye on a Pentium D 955 EE. Would hate to loose out on that

[fizzlesticks]

Well, at least paypal is unaffected, I was looking to buy some ebay stuff.

 

Got my eye on a Pentium D 955 EE. Would hate to loose out on that

Paypal might not be but ebay is.

 

Edit: Nevermind, ebay looks like it's fixed.

[rockking1379]

And I Still Don't Have an Anti Virus

you might wanna start looking at one

[WanderingFool]

I think it is important to note that even sites that are no longer vulnerable, if at any point their private keys were lost any prior data that was snooped on would be susceptible for decryption....or if they failed to change their private keys in the future will be vulnerable.

[rockking1379]

I think it is important to note that even sites that are no longer vulnerable, if at any point their private keys were lost any prior data that was snooped on would be susceptible for decryption....or if they failed to change their private keys in the future will be vulnerable.

This is very true too. All those who could have been affected should just redo the SSL keys and certificates.

[KakaoDj]

And I Still Don't Have an Anti Virus

 

 

you might wanna start looking at one

 

Won't defend against SSL exploits doe, that's not on your part.

Antiviruses can actually make your computer more vunerable, since all you have to do to take over the computer, is to take over the antivirus. And since the antivirus "straps" itself to the OS, it will be nasty if it's compromised

[Admire]

We are never even close to not be vulnerable