someone please explain Heartbleed !

[RWT98]

i know it a internet bug but can someone or several people explain it to me in detail ? 

[Guest]

End of the world...

[MegaDave91]

There's lots on the subject if you search for it.

[Enderman]

its bug with https that allowed hackers to steal information such as passwords without being noticed

idk if its fixed yet, i hear something about an update for SSL, but idk if its already 100% secure

[Lyons]

It's basically just lazy programming in C/C++. Unless you build heavier restrictions into strings, you render the request system very vulnerable.

 

 

 

[tp95112]

http://heartbleed.com/

[Tr3vor]

It's basically just lazy programming in C/C++. Unless you build heavier restrictions into strings, you render the request system very vulnerable.

 

*snip*

 

 

 

Whoa, I didn't know it was that stupid. This blows my mind how this got through like that.

[RWT98]

It's basically just lazy programming in C/C++. Unless you build heavier restrictions into strings, you render the request system very vulnerable.

 

 

how come someone didnt do this years ago then ?

[Lyons]

how come someone didnt do this years ago then ?

It's been exploited for a quite a long time, even by governments (no surprises here). It's just that now it's in mainstream media and because of that everyone loses their shit. It's kinda like shark attacks; sharks are always there and always a danger, but people only think or care about sharks after attacks happen and they are published.