Heartbleed: security flaw affects 2/3 of internet

Darqcyde

Your security may be compromised by "heartbleed."

For those who don't know, it is a security flaw affecting a large portion of the internet. There is an extension for Google Chrome, to see if a site is vulnerable.

More info:
http://arstechnica.com/security/2014/04/critical-crypto-bug-in-openssl-opens-two-thirds-of-the-web-to-eavesdropping/

This following site offers a test to see if a site you plan on going to is vulnerable. It is run by the Italian security firm that helped find the flaw: http://filippo.io/Heartbleed/
_________________
...if a single leaf holds the eye, it will be as if the remaining leaves were not there.
http://about.me/omardrake

Heretical Rants · Joined: 21 Jul 2009 Posts: 5344 Location: No.

basically, you should clear all of your sessions naow, and if you're a webmaster you should patch yer shit
_________________
butts

WheelsOfConfusion · Joined: 09 Jul 2006 Posts: 13382 Location: Unknown Kaddath

Basically, all the affected websites need to patch their OpenSSL install. (Any end-user OS with OpenSSL packaged needs an update too, but end users aren't a likely target for the attack; the servers are. Ubuntu updated yesterday to fix this issue).

Then they'll need to change their certs.

After that, once they have the new cert in place, you'll need to change your password for the site.

Heretical Rants · Joined: 21 Jul 2009 Posts: 5344 Location: No.

my password is 'banana'
_________________
butts

Darqcyde · Posted: Wed Apr 09, 2014 11:00 am Post subject:

Heretical Rants · Joined: 21 Jul 2009 Posts: 5344 Location: No.

I don't quite understand the reference, even if you link to it, since I can't make it more than a few seconds into that video and have difficulty processing that song in any form other than "Drop it like your mother got shot" which, now that I search for it, has apparently fallen victim to phenomenon known as `the-artist-has-taken-down-everything-they've-ever-made-like-seriously-their-bandcamp-tumblr-youtube-deviantart-etc-are-all-gone`
_________________
butts

Darqcyde · Posted: Wed Apr 09, 2014 11:42 am Post subject:

WheelsOfConfusion · Joined: 09 Jul 2006 Posts: 13382 Location: Unknown Kaddath

It's looking like the "2/3rds of the Internet" thing is somewhat overblown, more like 10-11%. That's still huge, and hopefully every affected site will patch their shit, get new certs, and then tell users to reset their passwords.

Anyway, xkcd explains how the flaw actually works:

Moor · Joined: 07 May 2013 Posts: 318

WheelsOfConfusion · Joined: 09 Jul 2006 Posts: 13382 Location: Unknown Kaddath

If we were really doing things right, a bug like this would have been caught before release.

Moor · Joined: 07 May 2013 Posts: 318

Sam · Joined: 09 Jul 2006 Posts: 10700

i changed all my passwords to hunter3

who's owned now, heartbleed