HeartBleed serious SSL vulnerability

Heads up guys! Anyone here running a site that uses an SSL certificate you need to look at http://heartbleed.com. There is a serious vulnerability that affects millions of websites where an attacker can obtain master keys and access pretty much all kinds of sensitive information (user/pass, etc) from your server. That site outlines the problem and the steps to resolve it. This isn't another run-of-the-mill security update but is rather something that you should be taking seriously if you run a service that uses an SSL cert.

Even if you don't run a server like this you should consider updating your password as pretty much any place where you have a user account probably uses a SSL cert which means that user accounts/passwords could have been taken.

The worst part is that the attack leaves no trace, so we have no idea if it happened to you or how widespread the issue is.

This just continues to prove the general maxim that no system is truly safe. Anyone who believes their connection is safe is a fool. Best to just see it as what it is: a deterrent. Patch it, but don't stake your life on it.

A lot of the hosts have already fixed their shared / reseller farms. I checked rackspace this morning and they are still updating.

It is strongly recommended to check your VPS and dedicated servers from filippo.io/Heartbleed/


If it is determined that you do have the vulnerability, you can apply patches to overcome this vulnerability.

This flaw explains why we shouldn't put anything critical into cyberspace. It can be a very long time until a certain problem is fixed. Sometimes it may never be fixed because it is never publicized. I'm surprised this bug wasn't sold to organized crime.