Heartbleed?

[ItinerantNomad]

So what do we do about this, Admin? Do we just change our passwords and hope for the best?

[Guest]

No point in changing the password if the server is still compromised. 

 

...and the server is only (potentially) compromised if they use open ssl.

 

In other words: Don't change your password until someone tells you to.

[Walsingham]

No point in changing the password if the server is still compromised. 

 

...and the server is only (potentially) compromised if they use open ssl.

 

In other words: Don't change your password until someone tells you to.

 

This is my understanding also.

 

In similar vein, this is what happens when everyone depends on a dev team doing difficult work for tips. Two overworked guys miss something.

[Hormalakh]

So, newest Project Eternity update talks about Heartbleed. Go ahead and change your passwords.

[Walsingham]

(From the email)

 

[Labadal]

Changed my password here and on every other site. I actually had to write down the passwords on a piece of paper to remember them all. No to put this piece of paper in my secret vault.

[TrashMan]

I'm not worried.

 

All passwords can be easily re-set as long as your e-mail is secure.

[BruceVC]

I'm not worried.

 

All passwords can be easily re-set as long as your e-mail is secure.

 

Its more complex than that, see the link to understand how Heartbleed functions

 

http://www.symantec.com/connect/blogs/heartbleed-poses-risk-clients-and-internet-things