Heartbleed

[iangb]

BBC News - Heartbleed Bug: Public urged to reset all passwords

I used one of the tools linked to by the article, and DP comes up as a (potentially) compromised website. Don't know if it's me misusing the tool, or even if it's a problem we can fix ourselves, but was definitely worth putting it out there.

(The article refers to a bug in OpenSSL meaning that attackers could potentially scrape usernames and passwords from anyone logging into the site)

 

[joG]

Thank you!

 

[X Factor]

Anybody else think this was going to be a complaint about liberals? :mrgreen:

 

[MMC]

BBC News - Heartbleed Bug: Public urged to reset all passwords

I used one of the tools linked to by the article, and DP comes up as a (potentially) compromised website. Don't know if it's me misusing the tool, or even if it's a problem we can fix ourselves, but was definitely worth putting it out there.

(The article refers to a bug in OpenSSL meaning that attackers could potentially scrape usernames and passwords from anyone logging into the site)

Heya IB.....Oh this place shows for that. I had the Thread up.....but I thought it was more for like banks and other financials that hold personal info.

Either way.....they still said it's not worth changing passwords until the fix is in.

 

[American]

Hmm, sorry started a similar thread in News. Did see this one. :shrug:

 

[American]

Heya IB.....Oh this place shows for that. I had the Thread up.....but I thought it was more for like banks and other financials that hold personal info.

Either way.....they still said it's not worth changing passwords until the fix is in.

Apparently the SSL fix is already available.

 

[Stewart]

Apparently the SSL fix is already available.

It is. However we are reliant on tHe server admins to apply it. The actual patch itself was a trivial code change. The question is now, how much damage has been done?