The Steel Guitar Forum Store 

Post new topic Heartbleed Bug - Yahoo & Others Affected
Reply to topic
Author Topic:  Heartbleed Bug - Yahoo & Others Affected
Jim Cooley


From:
The 'Ville, Texas, USA
Post  Posted 9 Apr 2014 11:04 am    
Reply with quote

Links to three website reports regarding the recently discovered Heartbleed bug. It's looks nasty.

http://heartbleed.com/

http://www.cnet.com/news/heartbleed-bug-undoes-web-encryption-reveals-user-passwords/

http://www.cnet.com/news/how-to-protect-yourself-from-the-heartbleed-bug/
_________________
Hey, mister, how do you pedal that thing anyway?

"The worst an honest man can do is make an honest mistake" - Augustus McCrae
"From the sweet grass to the packing house, birth 'til death, we travel between the eternities" - Prentiss Ritter

Too many steels, amps & other stuff, and an open mind. I have tube amp bias.
View user's profile Send private message Send e-mail

Paul Arntson


From:
Washington, USA
Post  Posted 9 Apr 2014 7:36 pm    
Reply with quote

Thanks for posting this. It appears to be a big deal.
At the very lest, after our banks and stuff have had time to upgrade, its time to change all passwords.
_________________
Excel D10 8&4, Supro 8, Regal resonator, Peavey Powerslide, homemade lap 12(a work in progress)
View user's profile Send private message Send e-mail

Wiz Feinberg


From:
Mid-Michigan, USA
Post  Posted 10 Apr 2014 7:14 am    
Reply with quote

The best advice is that if you intend to change passwords, do so on websites that test immune to the exploit. If you change them on sites that are not yet patched and which are now being probed by hackers, your newly changed password might be bled out.

All of this is very iffy right now. I was forced to change my password for Domaintools.com to use it. But, after testing the site, it only received a B and C for its own configuration security.

Test websites using SSL via the Qualys SSL Labs Tester.

Also, watch out for fake email messages about clicking to reset your password on this site or that site. Treat them as suspicious unless you use a mouse and can hover over the links to reveal the actual domain linked to. Otherwise, play it safe and log on directly, from saved bookmarks, or memory. Watch out for typos and typo-squatter websites set up as phishing sites.
_________________
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
View user's profile Send private message Send e-mail Visit poster's website

b0b


From:
Cloverdale, CA, USA
Post  Posted 13 Apr 2014 7:29 am    
Reply with quote

Here's a very good summary of which major web sites were affected:

http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/

The Steel Guitar Forum is NOT affected by this bug, as we do not use OpenSSL on our server.

The best way to keep passwords safe is to use a different password on every site, and keep them in a little notebook near your computer. A hacker can't ever get that.
_________________
-𝕓𝕆𝕓- (admin) - Robert P. Lee - Recordings - Breathe - D6th - Video
View user's profile Send private message Visit poster's website

Paul Arntson


From:
Washington, USA
Post  Posted 13 Apr 2014 11:06 am    
Reply with quote

Thanks so much for that website, b0b!!!!
_________________
Excel D10 8&4, Supro 8, Regal resonator, Peavey Powerslide, homemade lap 12(a work in progress)
View user's profile Send private message Send e-mail

Jim Cooley


From:
The 'Ville, Texas, USA
Post  Posted 18 Apr 2014 5:33 am    
Reply with quote

Below is a link you Norton's Safeweb page. You can use it to check whether specific websites are vulnerable.

http://safeweb.norton.com/heartbleed
View user's profile Send private message Send e-mail


All times are GMT - 8 Hours
Jump to:  

Our Online Catalog
Strings, CDs, instruction,
steel guitars & accessories

www.SteelGuitarShopper.com

Please review our Forum Rules and Policies

Steel Guitar Forum LLC
PO Box 237
Mount Horeb, WI 53572 USA


Click Here to Send a Donation

Email admin@steelguitarforum.com for technical support.


BIAB Styles
Ray Price Shuffles for
Band-in-a-Box

by Jim Baron
HTTP