Heartbleed Bug: Serious Hole in Internet Security

[Markbnj]

Looks like Akamai had a bug in their own allocator, which could expose half the components of the ssl private key. So they're rotating out all customer certs.

https://blogs.akamai.com/2014/04/heartbleed-update-v3.html

 

[Virgorising]

Looks like Akamai had a bug in their own allocator, which could expose half the components of the ssl private key. So they're rotating out all customer certs.

https://blogs.akamai.com/2014/04/heartbleed-update-v3.html

An RSA key has 6 critical values; our code would only attempt to protect 3 parts of the secret key, but does not protect 3 others. :'(

 

[Virgorising]

OMG!!!!!

http://www.huffingtonpost.com/2014/04/15/heartbleed-bug-android_n_5153812.html

I have android phone! Samsung.

OMG.D:
_____________________________________________
Edit: Above is not THE LEAD STORY on Huffington....it's not something in Huffington's Tech section.

 

[Red Squirrel]

Finally got around to redoing my openvpn certs, got my work laptop and phone working again. I had turned off my VPN till I can get around to doing it. I very highly doubt I got compromised considering it's running on a non standard port and that there's only a few IPs even allowed to access it, but figured I'd take all the right precautions since my version of openSSL was vulnerable.

 

[Virgorising]

http://www.huffingtonpost.com/2014/04/17/websites-heartbleed_n_5161298.html

 

[Virgorising]

Late offering:

somewhere in this interminable thread, I raised the issue of programmers, many part time workers being shamefully underpaid.....to bring proper vigilance.

Someone responded, well, who do you propose should pay? I had no clue.

But just now, found THIS optimism-generating piece!

Catastrophic events can inspire humans to change things for the better.

http://www.huffingtonpost.com/2014/...-openssl_n_5200690.html?utm_hp_ref=technology