OpenSSL Security issue.

[Tempest]

Security Problem in OpenSSL

[nullPointer]

Thanks for posting this Tempest. I read about this vulnerability on a separate site as well. It's actually quite concerning considering the multitudes of websites that rely on OpenSSL to protect personal data.

[Adultery]

All the ones I used passed the test. :-)

Damn heartbleed, it's always something. :-)

[nullPointer]

Here's a pretty decent list of popular websites affected by the Heartbleed vulnerability. I believe it's being updated as more sites issue their status and whether or not they are/were affected. It's probably a good time to get out there and change some passwords! Be safe out there everybody!

The Heartbleed Hit List: The Passwords You Need to Change Right Now

[Adultery]

Actually they say you're supposed to wait until they fix compliance. The worst thing you can do is log on, your data will end up in the buffer then.

[nullPointer]

I think most of the affected sites on that list recommending that users change their passwords are sites that were affected but have been (ostensibly) patched in the meantime. But yeah I mean you might be screwed either way really.

[headkaze]

Free Can Make You Bleed: the Underresourced Open Source

[tthurman]

In the end, it seems like this was sort of swept under the rug.

I used the lastpass https://lastpass.com/heartbleed/ site to assist determining if there was a possible breach on sites I use, and nearly everyone had old certificates. Some of them not real old, but old enough never the less. The popular consensuses was to "wait to hear from these institutions", and guess what? I haven't heard from any of them!

So did they determine that they didn't have any possible problems, or just kept their mouth shut to limit the possible exposure any type of revelation might bring?