Right everyone change your passwords.
There is/was a bug that could allow an attack to read information off a Web server even though it's supposed to be secured against intrusion.
A quote on the bbc site says ""Catastrophic is the right word. On the scale of one to 10, this is an 11,"
http://www.bbc.co.uk/news/technology-26954540 |
Reply privately, Reply in forum +quote
or View forums list | |
I found the non techy version....
Imagine two people, Dave and Samantha, shouting in the street. They use a secret language that only they know, so unless you know that language, you can't intercept their secrets. That's kinda like what SSL does. Now imagine that a scoundrel in between them figures out the language -- he can now intercept their conversation. This is what happens when people find vulnerabilities to SSL -- ways to circumvent or insert themselves into the stream of otherwise encrypted traffic. Usernames, passwords, private data. Bad, right? This is worse.
Now imagine that instead of merely overhearing and understanding Dave and Samantha's conversation, you can simply plug into the brain of Samantha and download random snippets of her conversation. That's essentially what this bug (in OpenSSL, specifically) resulted in. Yeah, it's nasty. |
Reply privately, Reply in forum +quote
or View forums list | |
Whether you understand it or not its a good idea to change passwords on bank accounts and twitter (twitter information is apparently more valuable now than credit card info..no idea why) and any other vulnerable web sites. I don't know if they've plugged the hole but if they haven't changing passwords might be in vain anyway. |
Reply privately, Reply in forum +quote
or View forums list | |
"Whether you understand it or not its a good idea to change passwords on bank accounts and twitter (twitter information is apparently more valuable now than credit card info..no idea why) and any other vulnerable web sites. I don't know if they've plugged the hole but if they haven't changing passwords might be in vain anyway."
There is a website that tests websites lol
I'll get shot if i linked it, but google "filippo heart bleed", everyone is pointing to that place to check if a website is safe |
Reply privately, Reply in forum +quote
or View forums list | |
to be honest you should change all your passwords every month weather its bank or fab
never a good idea to go to so said sites to check if you have been invaded in one way or other
you should clear all your cookies once a month at least and restore your computer regularly as well |
Reply privately, Reply in forum +quote
or View forums list | |
"to be honest you should change all your passwords every month weather its bank or fab
never a good idea to go to so said sites to check if you have been invaded in one way or other
you should clear all your cookies once a month at least and restore your computer regularly as well "
yes you're right, isn't there a man somewhere who changes his passwords daily? |
Reply privately, Reply in forum +quote
or View forums list | |
"to be honest you should change all your passwords every month weather its bank or fab
never a good idea to go to so said sites to check if you have been invaded in one way or other
you should clear all your cookies once a month at least and restore your computer regularly as well
yes you're right, isn't there a man somewhere who changes his passwords daily?"
i do mine 1st of every month i have been hacked before never again could of lost many thousands
even when sat in front of bank manager they was using my bank cards and credit cards lol ![](/icons/s/biggrin.gif) |
Reply privately, Reply in forum +quote
or View forums list | |
» Add a new message to this topic