Heartbleed

A section to discuss matters not related to Chess in particular.
Post Reply
Paul McKeown
Posts: 3255
Joined: Thu Apr 12, 2007 3:01 pm
Location: Hayes (Middx)
Contact:

Heartbleed

Post by Paul McKeown » Thu Apr 10, 2014 2:45 am

Anyone aware of being affected?

What is the best way for an internet user to handle this?

Loads of passwords for loads of sites, hard to know which are vulnerable. I wouldn't dare dream of using internet banking until this was clearly sorted. Bit of an internet nightmare, but I suppose OpenSSL being holed under the waterline isn't the sort of thing that is easily explained in 30 seconds on the main news of the day.

Note that ecforum seems safe, good work, Carl.

User avatar
Carl Hibbard
Posts: 5728
Joined: Fri Dec 08, 2006 8:05 pm
Location: Evesham

Re: Heartbleed

Post by Carl Hibbard » Thu Apr 10, 2014 6:16 am

Paul McKeown wrote:Anyone aware of being affected?

What is the best way for an internet user to handle this?

Loads of passwords for loads of sites, hard to know which are vulnerable. I wouldn't dare dream of using internet banking until this was clearly sorted. Bit of an internet nightmare, but I suppose OpenSSL being holed under the waterline isn't the sort of thing that is easily explained in 30 seconds on the main news of the day.

Note that ecforum seems safe, good work, Carl.
Not having SSL means we are not affected.

I would suggest resetting passwords on other major sites however especially if you never reset passwords or worse still use the same password in lots of places.
Cheers
Carl Hibbard

John McKenna
Posts: 3722
Joined: Tue May 17, 2011 2:02 pm

Re: Heartbleed

Post by John McKenna » Thu Apr 10, 2014 11:50 am

It was suggested last night that changing passwords on Google, Yahoo, etc. would be OK since the major sites will have fixed the 'bug'.
Smaller sites may take more time and so waiting a few days was recommended - as it is not a good idea to change passwords until the 'bug' has been fixed at those sites.

It has been said that domain names can be checked (to see if they have resolved the problem) at -

http://www.ssllabs.com

However, it was not obvious to me how to be sure it had been resolved when I tried a few names there.
To find a for(u)m that accommodates the mess, that is the task of the artist now. (Samuel Beckett)

Post Reply