Surreal Forums
Heartbleed OpenSSL Vulnerability (Important!) - Printable Version

+- Surreal Forums (https://board.clansurreal.com)
+-- Forum: Surreal (https://board.clansurreal.com/forum-1.html)
+--- Forum: Surreal News (https://board.clansurreal.com/forum-2.html)
+---- Forum: Archived News (https://board.clansurreal.com/forum-24.html)
+---- Thread: Heartbleed OpenSSL Vulnerability (Important!) (/thread-7445.html)

Pages: 1 2


Heartbleed OpenSSL Vulnerability (Important!) - Downfall - 2014-04-10

http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/

A bug in an earlier version of OpenSSL has negatively affected the security characteristics of 1 in 3 servers globally. Check out the link above and update your passwords for the sites it suggests. Google, Yahoo and Facebook are among thousands of other affected websites - you may be vulnerable, so don't take that chance. I'd also change your RuneScape password just in case.

Stay safe! (Surreal's website was not affected by this)


RE: Heartbleed OpenSSL Vulnerability (Important!) - Jack - 2014-04-10

I've gone ahead and changed any passwords that were affected. Thanks for this.


RE: Heartbleed OpenSSL Vulnerability (Important!) - Joseph - 2014-04-10

thanks jordan!


RE: Heartbleed OpenSSL Vulnerability (Important!) - Michael - 2014-04-10

Thanks Jordan!


RE: Heartbleed OpenSSL Vulnerability (Important!) - Mini Kniight - 2014-04-10

Thanks Jordan but you forgot to mention to only change the password if the affected service has already implemented a solution. If they didn't people can still see your information and changing password won't be effective.

Edit: And if you use 2-step verification on services that provides it you should be safe since people can't access your account with only your password.


RE: Heartbleed OpenSSL Vulnerability (Important!) - Liz - 2014-04-10

Thank you for all the info! smile


RE: Heartbleed OpenSSL Vulnerability (Important!) - Downfall - 2014-04-10

(2014-04-10 14:26:24)Kniight Lost Wrote:  Thanks Jordan but you forgot to mention to only change the password if the affected service has already implemented a solution. If they didn't people can still see your information and changing password won't be effective.

Edit: And if you use 2-step verification on services that provides it you should be safe since people can't access your account with only your password.

Right you are Nicholas. Thanks for the correction smile Yes, two-step services can assist, but in the end, all they are is a time-based code that's generated based off an encrypted key. If that encrypted key leaks, there's also no point in it existing.


RE: Heartbleed OpenSSL Vulnerability (Important!) - Debs - 2014-04-10

Thanks for the warning Jordan


RE: Heartbleed OpenSSL Vulnerability (Important!) - Jonathan - 2014-04-10

Thanks for the heads up man !!! smile


RE: Heartbleed OpenSSL Vulnerability (Important!) - Bowlinmaster - 2014-04-10

I'm going with that this bug is very over dramatized... but that's just me.