Real or hoax: Heartbleed

[Beer-lord]

WARNING! READ: "The biggest network security vulnerability in history was revealed in the last 24 hours. It's called "heartbleed." Everything you do for the next 24-48 hours will be viewable by random 3rd parties. Encrypted connections are not secure until this vulnerability is fixed. Billions will be affected. DO NOT LOG in to anything. DO NOT change any passwords. DO NOT say or do anything online that you would not want anonymous 3rd parties observing or copying. (This came from a reliable source in my family; he said it was okay to write on fb... or to read email from known sources as long as you observe the above "do nots.") Don't buy anything online today! Don't log into your bank account, etc.
Read more at http://www.snopes.co...g8OtfS6sA2MH.99

WARNING! READ: "The biggest network security vulnerability in history was revealed in the last 24 hours. It's called "heartbleed."

https://www.google.c...el=np&source=hp

[FrozenInTime]

Neither link works for me.

[Gymrat]

http://www.cnn.com/2014/04/08/tech/web/ ... d-openssl/

[FrozenInTime]

Snopes linky

[FrozenInTime]

Thanks for the heads up. I just read that then sent it to everyone I know... took bout 3 seconds...lol

[mtsoxfan]

The local and national news didn't report it like that. They said what and how, but they recommended changing your passwords. My thought is, is this a one time thing to think about, or is changing of the passwords going to become a Friday night ritual??

[Beer-lord]

Here's a list of the websites you should change passwords for in case anyone cares.
http://mashable.com/2014/04/09/heartble ... l2am52aCJ9

[philm00x]

The thing about the passwords is that you can change them now, but you might have to change them again and again until the site(s) you're changing it(them) for have upgraded their encryption software to the protected version, at which point, the site might ask you to change it again anyhow.

[Chuck N]

I think all "random 3rd party" individuals are big stupid poopy-butts that eat their poop and are stupid.

[BlackDuck]

In order to change your password, don't you have to log in to begin with, then make the change? So if the site was already compromised, whould't they be able to figure out your new password since you had to log in with your original first?

[berryman]

In order to change your password, don't you have to log in to begin with, then make the change? So if the site was already compromised, whould't they be able to figure out your new password since you had to log in with your original first?

This is what I was thinking also, so if this thing is for real, just lay low for awhile and not log into anything and it will pass. As far as my FarceBook account , they can have at it if they want

[Beer-lord]

I'll donate my FB account too. They'd use it in place of Ambien.

[evily]

Here's a website that shows which sites have upgraded their OpenSSL so that you can safely change your password. It also shows ones that are not affected by Heartbleed, and ones that have not yet upgraded (or yet responded to inquiry about updating their software). Good info. Like Phil said, there's no point in changing your password on a site that hasn't updated their software yet, as you'll just have to do it again once they update.

http://www.cnet.com/news/which-sites-ha ... bleed-bug/

Of course, this list does not include lesser-known websites, such as your local banking institution, etc. So you'll have to contact them directly to find out if they were affected, and whether they've updated their software.

[Brewbirds]

To heck with my banking info what I want to know is if they can compromise the Borg and steal all of our recipes.