Page 1 of 1

Real or hoax: Heartbleed

Posted: Wed Apr 09, 2014 9:03 pm
by Beer-lord
WARNING! READ: "The biggest network security vulnerability in history was revealed in the last 24 hours. It's called "heartbleed." Everything you do for the next 24-48 hours will be viewable by random 3rd parties. Encrypted connections are not secure until this vulnerability is fixed. Billions will be affected. DO NOT LOG in to anything. DO NOT change any passwords. DO NOT say or do anything online that you would not want anonymous 3rd parties observing or copying. (This came from a reliable source in my family; he said it was okay to write on fb... or to read email from known sources as long as you observe the above "do nots.") Don't buy anything online today! Don't log into your bank account, etc.
Read more at http://www.snopes.co...g8OtfS6sA2MH.99

WARNING! READ: "The biggest network security vulnerability in history was revealed in the last 24 hours. It's called "heartbleed."

https://www.google.c...el=np&source=hp

Re: Real or hoax: Heartbleed

Posted: Wed Apr 09, 2014 10:24 pm
by FrozenInTime
Neither link works for me.

Re: Real or hoax: Heartbleed

Posted: Wed Apr 09, 2014 10:27 pm
by Gymrat

Re: Real or hoax: Heartbleed

Posted: Wed Apr 09, 2014 10:29 pm
by FrozenInTime

Re: Real or hoax: Heartbleed

Posted: Wed Apr 09, 2014 10:39 pm
by FrozenInTime
Thanks for the heads up. I just read that then sent it to everyone I know... took bout 3 seconds...lol

Re: Real or hoax: Heartbleed

Posted: Thu Apr 10, 2014 3:06 pm
by mtsoxfan
The local and national news didn't report it like that. They said what and how, but they recommended changing your passwords. My thought is, is this a one time thing to think about, or is changing of the passwords going to become a Friday night ritual??

Re: Real or hoax: Heartbleed

Posted: Thu Apr 10, 2014 3:14 pm
by Beer-lord
Here's a list of the websites you should change passwords for in case anyone cares.
http://mashable.com/2014/04/09/heartble ... l2am52aCJ9

Re: Real or hoax: Heartbleed

Posted: Thu Apr 10, 2014 3:57 pm
by philm00x
The thing about the passwords is that you can change them now, but you might have to change them again and again until the site(s) you're changing it(them) for have upgraded their encryption software to the protected version, at which point, the site might ask you to change it again anyhow.

Re: Real or hoax: Heartbleed

Posted: Thu Apr 10, 2014 6:29 pm
by Chuck N
I think all "random 3rd party" individuals are big stupid poopy-butts that eat their poop and are stupid.

Re: Real or hoax: Heartbleed

Posted: Thu Apr 10, 2014 7:28 pm
by BlackDuck
In order to change your password, don't you have to log in to begin with, then make the change? So if the site was already compromised, whould't they be able to figure out your new password since you had to log in with your original first?

Re: Real or hoax: Heartbleed

Posted: Thu Apr 10, 2014 7:47 pm
by berryman
BlackDuck wrote:In order to change your password, don't you have to log in to begin with, then make the change? So if the site was already compromised, whould't they be able to figure out your new password since you had to log in with your original first?
This is what I was thinking also, so if this thing is for real, just lay low for awhile and not log into anything and it will pass. As far as my FarceBook account , they can have at it if they want :)

Re: Real or hoax: Heartbleed

Posted: Thu Apr 10, 2014 8:17 pm
by Beer-lord
I'll donate my FB account too. They'd use it in place of Ambien.

Re: Real or hoax: Heartbleed

Posted: Fri Apr 11, 2014 8:37 am
by evily
Here's a website that shows which sites have upgraded their OpenSSL so that you can safely change your password. It also shows ones that are not affected by Heartbleed, and ones that have not yet upgraded (or yet responded to inquiry about updating their software). Good info. Like Phil said, there's no point in changing your password on a site that hasn't updated their software yet, as you'll just have to do it again once they update.

http://www.cnet.com/news/which-sites-ha ... bleed-bug/

Of course, this list does not include lesser-known websites, such as your local banking institution, etc. So you'll have to contact them directly to find out if they were affected, and whether they've updated their software.

Re: Real or hoax: Heartbleed

Posted: Fri Apr 11, 2014 8:43 am
by Brewbirds
To heck with my banking info what I want to know is if they can compromise the Borg and steal all of our recipes. :sweat: