OpenSSL security vulnerability
- Thread starter ORM
- Start date
tixpf
Regular Member
- Dec 1, 2013
- 295
- 115
I see what you did there.
miedy
Supreme Member
- May 17, 2012
- 1,256
- 578
official site : http://heartbleed.com/
ORM
Power Member
- Oct 16, 2013
- 756
- 703
Obsolutely. This thread was created with intention to inform others who werent aware of that
You should not only change your passwords but if you run any SSL sites with the vulnerable version of openssl you should re-issue you SSL certificates with a new private key as well as patching your servers.
It is possible that your private key has been stolen in which case the SSL communication with your site is just as good a clear text communication to someone who has your private key since they can decrypt this communication. This would mean that even if your users change their passwords, they could easily be stolen again.
It is possible that your private key has been stolen in which case the SSL communication with your site is just as good a clear text communication to someone who has your private key since they can decrypt this communication. This would mean that even if your users change their passwords, they could easily be stolen again.
auxiliarus
Regular Member
- Aug 4, 2013
- 466
- 235
Lol, I think it's been for around 3 years already.
Not discovered?
Not discovered?
auxiliarus
Regular Member
- Aug 4, 2013
- 466
- 235
.micjustin33
Newbie
- Feb 3, 2014
- 25
- 2
This is seriously a bad bug. I will be keen to see how many companies step forward and fess up that they were vulnerable. They really have no choice and need to tell people so they can change their passwords.