About the Heartbleeds Hack - RV-Dreams Community Forum

cherylbrv · RV-Dreams Family Member

About the Heartbleeds Hack

Jo And Craig · RV-Dreams Family Member

Let us know when we can change our info. Thanks, Cheryl.

PIEERE · RV-Dreams Family Member

Thanks for the info!!! Sometime technology is just a royal Pain!!!! I get used to using different passwords and then---it seems to have start from scratch again!! Maybe I should get all your addresses and us Snail Mail!!! LOL!

bjoyce · RV-Dreams Family Member

From http://rickpaulettervjournal.blogspot.com/2014/04/heartbleed-security-flaw-what-you.html:
---
Yahoo seems to be most affected. Facebook, Google, and Twitter's Web sites appear to be safe. Yahoo said that it has "successfully made appropriate corrections" to the main Yahoo properties: Yahoo Homepage, Search, Mail, Finance, Sports, Food, Tech, Flickr and Tumblr. Still, a Yahoo spokesperson said the company is still working to make the fix across the rest of the Yahoo sites.

----

I am not that worried. I did install the Chromebleed extension to Chrome, since I use Chrome.

bjoyce · RV-Dreams Family Member

Here is a list of sites that were tested on April 8th - https://github.com/musalbas/heartbleed-masstest/blob/master/top1000.txt. Yahoo sites are the main worry, which is normal. Most other important sites were not vulnerable.

bugsplatter · RV-Dreams Community Member

Heartbleed is actually not a "hack" — it's a vulnerability. The extent of compromise of the vulnerability (how much it was hacked) is unknown.

It's one heck of a vulnerability.

Details here:

http://heartbleed.com/

-- Edited by bugsplatter on Thursday 10th of April 2014 01:57:03 PM

Lucky Mike · RV-Dreams Family Member

money.cnn.com/2014/04/10/technology/security/heartbleed-passwords/index.html

Neil and Connie · RV-Dreams Family Member

It isn't nearly as catastrophic as the news would have you believe. Sure, it's a vulnerability and needs to be patched…but the actual likelihood of your passwords being compromised is very, very low. The biggest likelihood is that the SSL keys for the server could have been compromised and thus a bad guy could impersonate the server…although there's a lot more to this than just getting the SSL keys.

Did I go and change my passwords on affected sites after they were patched? Sure, but then I periodically change them anyway.

Am I (or you) at serious risk? Unlikely at best.

Use decent passwords, don't reuse them on different sites, and monitor your credit and bank accounts frequently.

If anybody is interested in decent passwords and how to create and/or remember them say so and I'll go into more detail as this used to be my business before I retired.