- 326
- Hudson, WI
- DRIFTER_X7
List of every company affected by Heartbleed can be found here: https://github.com/musalbas/heartbleed-masstest/blob/master/top1000.txt
Last edited by a moderator:
The "Heartbleed" Bug
- Thread starter DRIFT3R_X7
- 19 comments
- 1,072 views
List of every company affected by Heartbleed can be found here: https://github.com/musalbas/heartbleed-masstest/blob/master/top1000.txt
Robin
Premium
- 16,799
- United Kingdom
So on the one hand sites are saying change your password because of this, on the other hand they are saying that changing it now whilst all the spotlight is on it will make it even more likely your new one will be stolen. 
And this bug has been around for 2 YEARS.... epic fail.
And this bug has been around for 2 YEARS.... epic fail.
Ibonibo
Premium
- 5,440
- Luxemburg
- Already paying my Isp 4 Access
I use yahoo mail 
But only for stuff like gaming, forums,...
I have so many mail accounts, from gmail to yahoo to my own mail server
I had my account hacked once in all the 15 years using yahoo. 1 account out of 10 I have on yahoo.
Ever since I have a computer, I never have gotten my system infected.
That's the most common problem, so many people having old anti-virus, no firewall and the computer full of trojans. That's the most common way, pw get stolen.
And even if something happens, as I don't act careless (secure p/w, always different p/w,...), my bank will always give me my money back.
But this man made bug is really big. Facebook, Steam,... so many high profile sites...
But only for stuff like gaming, forums,...
I have so many mail accounts, from gmail to yahoo to my own mail server
I had my account hacked once in all the 15 years using yahoo. 1 account out of 10 I have on yahoo.
Ever since I have a computer, I never have gotten my system infected.
That's the most common problem, so many people having old anti-virus, no firewall and the computer full of trojans. That's the most common way, pw get stolen.
And even if something happens, as I don't act careless (secure p/w, always different p/w,...), my bank will always give me my money back.
But this man made bug is really big. Facebook, Steam,... so many high profile sites...
Last edited:
CodeRedR51
Premium
- 55,321
- United States
I have an account there but haven't actively used it in a few years. I use Gmail now...
- 36,697
- Scotland
- GTP_daan
The BBC published a list of sites and whether they were vulnerable, and if they have been fixed or not.
http://www.bbc.co.uk/news/technology-26971363
http://www.bbc.co.uk/news/technology-26971363
- 14,060
- Ireland
- driftking18594
- CiaranGTR94
BobK
Premium
- 7,020
- Massachusetts, USA
Not surprising that we'd be hearing something like this. Whether it's actually true or not, the agency would deny it; we all know that. And regardless of the evidence (which right now is pretty much unsourced rumors) a lot of people would believe they were involved.
Myself, I don't know. But I regret to say I do find it believeable.
Myself, I don't know. But I regret to say I do find it believeable.
BobK
Premium
- 7,020
- Massachusetts, USA
Do you personally know the backgrounds of everybody who made a commit to the the code? I surely don't.
I do agree with you, though, that the NSA (probably) wasn't responsible for planting the bug although I certainly don't rule out the possibility. However, the more I read about this the more convinced I become that the NSA knew about the bug very early on.
For those who may not understand how the bug works, here's one of the best explanations I've seen yet:
EDIT:
Nevermind, treed by @niky!
- 8,451
- Rockay City
- 23,800
- Philippines
Exactly what the comic in Post #15 states. You can query a server to see that it's still there. The server returns the canned response you ask it to send, but you can trick it to send much, much more information than that.
All you have to do is sift through the information sent back and you can glean passwords, credit card numbers and a whole lot of other stuff.
