The Heartbleed Bug that steals your information

[lilly]

This is a really good article on what Heartbleed is.  http://community.spiceworks.com/topic/472604-heartbleed-bug-poses-serious-threat-to-unpatched-servers-a-bit-on-how-it-works?utm_campaign=digest&utm_medium=email&utm_source=digest_groups

Have a read and protect yourselves.  Might be a good idea to change passwords. 

[minorcharacter]

It's futile to change your password until the site itself updates it's security measure.  If hackers wanted your information, they'd simply just get it again.

Want to know if the site you use has updated it's security protocols?

http://filippo.io/Heartbleed/

[tsabsuav]

This is a really good article on what Heartbleed is.  http://community.spiceworks.com/topic/472604-heartbleed-bug-poses-serious-threat-to-unpatched-servers-a-bit-on-how-it-works?utm_campaign=digest&utm_medium=email&utm_source=digest_groups

Have a read and protect yourselves.  Might be a good idea to change passwords.

Many thanks for the info. I haven't come across this particular article although I have read several articles online since this bug was discovered on April 7th. Thank Goodness we don't use OpenSSL, but one of our vendors does and was quickly patched.

[lilly]

Many thanks for the info. I haven't come across this particular article although I have read several articles online since this bug was discovered on April 7th. Thank Goodness we don't use OpenSSL, but one of our vendors does and was quickly patched.

You're welcome.  I was glad to see so many sites and companies taking urgency to the issue and making patches to their servers.

[supadupac]

this is a good explanation too

[lilly]

SupaDupaC, LOL!  But yes, essentially.

[supadupac]

lol it's such a easy back way in, you would think SSL was a little more secure when beinh developedq

[lilly]

lol it's such a easy back way in, you would think SSL was a little more secure when beinh developedq

I know, right?  SSL for a reason!  Duh!  SECURE sockets layer!  But whatever.  I just hope everyone learned their lesson and be more careful and developers think like crooks next time they build their stuff.

[supadupac]

I know, right?  SSL for a reason!  Duh!  SECURE sockets layer!  But whatever.  I just hope everyone learned their lesson and be more careful and developers think like crooks next time they build their stuff.

exactly! lol peb hmong probably can be leaked lol jk

[N`Chync]

On Android mostly effects Jelly bean but I'm safe since I'm on Android KitKat and a custom ROM

[N`Chync]

[tsabsuav]

I was under the impression that the vulnerability is only on port 443, but just learned earlier today that many other ports are also vulnerable. They are 21, 25, 443, 587, 990, 993, 8443 and possibly a few others.  NMap and Zenmap is a great tool to scan internal hosts/LAN for vulnerability.

[six]

exactly! lol peb hmong probably can be leaked lol jk

hahaha...run wireshark at any university and you'll get every student's pebhmong account.