FabSwingers.com forum: Heartbleed

By *hyllyphylly OP Man
over a year ago

Bradford

Right everyone change your passwords.

There is/was a bug that could allow an attack to read information off a Web server even though it's supposed to be secured against intrusion.

A quote on the bbc site says ""Catastrophic is the right word. On the scale of one to 10, this is an 11,"

http://www.bbc.co.uk/news/technology-26954540

Reply privately

Reply in forum

Reply +quote

By *igerstyle2k2Man
over a year ago

Oxfordshire

Just read about this. Bad news.

Reply privately

Reply in forum

Reply +quote

By *ce WingerMan
over a year ago

P.O. Box DE1 0NQ

My password is *********

Reply privately

Reply in forum

Reply +quote

By *ezebelWoman
over a year ago

North of The Wall - youll need your vest

Saw this on the BBC website earlier and was going to ask about it - but I didnt want to be a technophobe drama queen...

Should I be worrying?

Reply privately

Reply in forum

Reply +quote

By *hyllyphylly OP Man
over a year ago

Bradford

I found the non techy version....

Imagine two people, Dave and Samantha, shouting in the street. They use a secret language that only they know, so unless you know that language, you can't intercept their secrets. That's kinda like what SSL does. Now imagine that a scoundrel in between them figures out the language -- he can now intercept their conversation. This is what happens when people find vulnerabilities to SSL -- ways to circumvent or insert themselves into the stream of otherwise encrypted traffic. Usernames, passwords, private data. Bad, right? This is worse.

Now imagine that instead of merely overhearing and understanding Dave and Samantha's conversation, you can simply plug into the brain of Samantha and download random snippets of her conversation. That's essentially what this bug (in OpenSSL, specifically) resulted in. Yeah, it's nasty.

Reply privately

Reply in forum

Reply +quote

By *0hnnyBrav0Man
over a year ago

Great Wyrley

Is this the ssl thing?

Reply privately

Reply in forum

Reply +quote

By *reelove1969Couple
over a year ago

bristol

i dont even get the non techy version !

Reply privately

Reply in forum

Reply +quote

By (user no longer on site)
over a year ago

"i dont even get the non techy version !"

Me neither. Think I need to read it later.

Reply privately

Reply in forum

Reply +quote

By *icecouple561Couple
Forum Mod
over a year ago

East Sussex

Whether you understand it or not its a good idea to change passwords on bank accounts and twitter (twitter information is apparently more valuable now than credit card info..no idea why) and any other vulnerable web sites. I don't know if they've plugged the hole but if they haven't changing passwords might be in vain anyway.

Reply privately

Reply in forum

Reply +quote

By *hyllyphylly OP Man
over a year ago

Bradford

"Whether you understand it or not its a good idea to change passwords on bank accounts and twitter (twitter information is apparently more valuable now than credit card info..no idea why) and any other vulnerable web sites. I don't know if they've plugged the hole but if they haven't changing passwords might be in vain anyway."

There is a website that tests websites lol

I'll get shot if i linked it, but google "filippo heart bleed", everyone is pointing to that place to check if a website is safe

Reply privately

Reply in forum

Reply +quote

By *AMES19620Man
over a year ago

newport

to be honest you should change all your passwords every month weather its bank or fab

never a good idea to go to so said sites to check if you have been invaded in one way or other

you should clear all your cookies once a month at least and restore your computer regularly as well

Reply privately

Reply in forum

Reply +quote

By *icecouple561Couple
Forum Mod
over a year ago

East Sussex

"to be honest you should change all your passwords every month weather its bank or fab

never a good idea to go to so said sites to check if you have been invaded in one way or other

you should clear all your cookies once a month at least and restore your computer regularly as well "

yes you're right, isn't there a man somewhere who changes his passwords daily?

Reply privately

Reply in forum

Reply +quote

By *AMES19620Man
over a year ago

newport

"to be honest you should change all your passwords every month weather its bank or fab

never a good idea to go to so said sites to check if you have been invaded in one way or other

you should clear all your cookies once a month at least and restore your computer regularly as well

yes you're right, isn't there a man somewhere who changes his passwords daily?"

i do mine 1st of every month i have been hacked before never again could of lost many thousands

even when sat in front of bank manager they was using my bank cards and credit cards lol

Reply privately

Reply in forum

Reply +quote

Post new Message to Thread