Gaming World Forums

General Category => General Talk => Topic started by: Warped655 on April 09, 2014, 06:34:48 pm

Title: HeartBleed
Post by: Warped655 on April 09, 2014, 06:34:48 pm

http://krebsonsecurity.com/2014/04/heartbleed-bug-exposes-passwords-web-site-encryption-keys/ (http://krebsonsecurity.com/2014/04/heartbleed-bug-exposes-passwords-web-site-encryption-keys/)

http://lifehacker.com/what-the-heartbleed-security-bug-means-for-you-1560801201 (http://lifehacker.com/what-the-heartbleed-security-bug-means-for-you-1560801201)

Check if any particular site is CURRENTLY exposed:
http://filippo.io/Heartbleed/ (http://filippo.io/Heartbleed/)

Hey everybody, if you reuse passwords at all change them. Except at places that are still exposed to this issue. That wont help you. You are basically at the site's mercy until they update their openSSL.

Title: HeartBleed
Post by: crone_lover720 on April 09, 2014, 07:31:44 pm

I dont wanna change my pw. is there a way to know which sites/servers were effected? I only log in to like 4 sites.

Title: HeartBleed
Post by: ATARI on April 09, 2014, 07:37:34 pm

come at me bro

Title: HeartBleed
Post by: bonzi_buddy on April 10, 2014, 08:37:26 am

how urgent is this? im doing lotsa work atm so can someone summarize dis? all this and more affects when im doing this in my schedule.

Title: HeartBleed
Post by: denzquix on April 10, 2014, 11:56:44 am

Quote from: bonzi_buddy on April 10, 2014, 08:37:26 am

how urgent is this? im doing lotsa work atm so can someone summarize dis? all this and more affects when im doing this in my schedule.

 
someone worked out how to say to a bunch of secure websites (like specifically ones that are supposed to care the most about security) "hey give me a bunch of data that your computer got in memory right now ok" and what they got back could include usernames, passwords, private messages, encryption keys, all the really juicy stuff that an attacker could use to compromise users & whole sites
 
it looks like attackers have been using this for months before it was disclosed, so, god knows how many passwords and such got scooped in that time
 
it's about as serious as this kind of thing gets

Title: HeartBleed
Post by: crone_lover720 on April 10, 2014, 03:11:55 pm

so here's a list, looks like those three other sites I log in to were possibly effected http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/ (http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/)

Title: HeartBleed
Post by: Ragnar on April 10, 2014, 05:17:30 pm

HeartBleed the liberal fighting game by SNK

Title: HeartBleed
Post by: bonzi_buddy on April 11, 2014, 05:29:05 am

ragnar knows his gems... but yeah ragnar change ur pw in dropbox and soundcloud. paypal and amazon ain't unaffected. gmail and fb is affected, coo that i aint SoMe/web20 so dodged the instagram twitter etc bullet... is saltw affected??
 
btw minecraft IS affected... of all things... worlds unto itself...