Heartbleed

[sgt stutter]

I'm sure most of you are aware it's been in the news quite a bit as of late, stay safe.

https://www.google.com/#q=heartbleed

[belak]

Definitely a huge issue.

Explanation: http://heartbleed.com/
The fix: https://github.com/openssl/openssl/comm ... b11c44aead
Checker (if you know how to use Go programs. There's a python one out there somewhere as well.): https://github.com/FiloSottile/Heartbleed

tl;dr: There was a bug relating to one of the most common encryption libraries for servers. This may have made it possible for attackers to get the information needed to impersonate large services (such as Yahoo, Steam, etc). It's been patched and many large sites have been updated, but be careful. About 66% of the servers on the internet use software which uses this library by default.

[jettah]

Thanks for the warning. I take it TheVille is safe?

[black_and_blue]

Thanks for the warning. I take it TheVille is safe?

This is an OpenSSL based attack. TheVille doesn't use https at all, which kind of exempts it from any encryption-based attack.

Of course it also means that none of the traffic you send is encrypted at all, so you certainly wouldn't want to be typing your forum password it in an open wi-fi hotspot.

[Knowing]

I learned about this around this morning... I changed about every password I know that uses https. Kind of freaked out still. O.O

[belak]

Useful link for which services are known to have possibly been compromised:

http://mashable.com/2014/04/09/heartble ... -tech-link

[BigBiker05]

Useful link for which services are known to have possibly been compromised:

http://mashable.com/2014/04/09/heartble ... -tech-link

Thanks for the list. People kept talking about this but no one dumbed it to for us folks.

[belak]

http://www.xkcd.com/1353/

Relevant.

[jettah]

Yeah, I am bad at advanced internets. Thanks for the dummies version.

[Will T.]

There's now another XKCD about this, with a more in-depth explanation that manages to be simple enough for even me to understand.

[metacide]

There's now another XKCD about this, with a more in-depth explanation that manages to be simple enough for even me to understand.

Dang I was gonna post that.