PebHmong Discussion Forum

Hobbies & Interests => Computer & Technology => Topic started by: lilly on April 10, 2014, 09:55:02 AM

Title: The Heartbleed Bug that steals your information
Post by: lilly on April 10, 2014, 09:55:02 AM
This is a really good article on what Heartbleed is.  http://community.spiceworks.com/topic/472604-heartbleed-bug-poses-serious-threat-to-unpatched-servers-a-bit-on-how-it-works?utm_campaign=digest&utm_medium=email&utm_source=digest_groups (http://community.spiceworks.com/topic/472604-heartbleed-bug-poses-serious-threat-to-unpatched-servers-a-bit-on-how-it-works?utm_campaign=digest&utm_medium=email&utm_source=digest_groups)

Have a read and protect yourselves.  Might be a good idea to change passwords. 
Title: Re: The Heartbleed Bug that steals your information
Post by: minorcharacter on April 10, 2014, 10:48:23 AM
It's futile to change your password until the site itself updates it's security measure.  If hackers wanted your information, they'd simply just get it again.

Want to know if the site you use has updated it's security protocols?

http://filippo.io/Heartbleed/ (http://filippo.io/Heartbleed/)
Title: Re: The Heartbleed Bug that steals your information
Post by: tsabsuav on April 14, 2014, 09:54:17 PM
This is a really good article on what Heartbleed is.  http://community.spiceworks.com/topic/472604-heartbleed-bug-poses-serious-threat-to-unpatched-servers-a-bit-on-how-it-works?utm_campaign=digest&utm_medium=email&utm_source=digest_groups (http://community.spiceworks.com/topic/472604-heartbleed-bug-poses-serious-threat-to-unpatched-servers-a-bit-on-how-it-works?utm_campaign=digest&utm_medium=email&utm_source=digest_groups)

Have a read and protect yourselves.  Might be a good idea to change passwords.

Many thanks for the info. I haven't come across this particular article although I have read several articles online since this bug was discovered on April 7th. Thank Goodness we don't use OpenSSL, but one of our vendors does and was quickly patched.
Title: Re: The Heartbleed Bug that steals your information
Post by: lilly on April 16, 2014, 09:28:33 AM
Many thanks for the info. I haven't come across this particular article although I have read several articles online since this bug was discovered on April 7th. Thank Goodness we don't use OpenSSL, but one of our vendors does and was quickly patched.

You're welcome.  I was glad to see so many sites and companies taking urgency to the issue and making patches to their servers.
Title: Re: The Heartbleed Bug that steals your information
Post by: supadupac on April 16, 2014, 09:35:08 AM
this is a good explanation too

(http://imgs.xkcd.com/comics/heartbleed_explanation.png)
Title: Re: The Heartbleed Bug that steals your information
Post by: lilly on April 16, 2014, 09:40:58 AM
SupaDupaC, LOL!  But yes, essentially.
Title: Re: The Heartbleed Bug that steals your information
Post by: supadupac on April 16, 2014, 09:43:39 AM
lol it's such a easy back way in, you would think SSL was a little more secure when beinh developedq
Title: Re: The Heartbleed Bug that steals your information
Post by: lilly on April 16, 2014, 09:49:21 AM
lol it's such a easy back way in, you would think SSL was a little more secure when beinh developedq


I know, right?  SSL for a reason!  Duh!  SECURE sockets layer!  But whatever.  I just hope everyone learned their lesson and be more careful and developers think like crooks next time they build their stuff.
Title: Re: The Heartbleed Bug that steals your information
Post by: supadupac on April 16, 2014, 09:49:45 AM
I know, right?  SSL for a reason!  Duh!  SECURE sockets layer!  But whatever.  I just hope everyone learned their lesson and be more careful and developers think like crooks next time they build their stuff.

exactly! lol peb hmong probably can be leaked lol jk
Title: Re: The Heartbleed Bug that steals your information
Post by: N`Chync on April 17, 2014, 02:51:50 AM
On Android mostly effects Jelly bean but I'm safe since I'm on Android KitKat and a custom ROM
Title: Re: The Heartbleed Bug that steals your information
Post by: N`Chync on April 22, 2014, 04:02:23 PM
(http://i128.photobucket.com/albums/p200/NChync/Screenshot_2014-04-22-16-01-08.png) (http://s128.photobucket.com/user/NChync/media/Screenshot_2014-04-22-16-01-08.png.html)
Title: Re: The Heartbleed Bug that steals your information
Post by: tsabsuav on April 23, 2014, 07:24:06 PM
I was under the impression that the vulnerability is only on port 443, but just learned earlier today that many other ports are also vulnerable. They are 21, 25, 443, 587, 990, 993, 8443 and possibly a few others.  NMap and Zenmap is a great tool to scan internal hosts/LAN for vulnerability.
Title: Re: The Heartbleed Bug that steals your information
Post by: six on April 26, 2014, 02:59:52 AM
exactly! lol peb hmong probably can be leaked lol jk

hahaha...run wireshark at any university and you'll get every student's pebhmong account.