major security flaw per fox news

[Tula]

I just changed some of my pass words....and learned about it right here on our garden forum!!!

 

[j.w]

It's gonna take me forever to change all mine. Do we have to do them all or just important ones?

 

[addy1]

It's gonna take me forever to change all mine. Do we have to do them all or just important ones?

I use a manager that does really complex passwords for anything financial. If you are concerned change any that have to do with your banking, cc's etc. Where they could snatch your money, mess with your credit.

 

[addy1]

here is cnet on how to protect yourself

http://www.cnet.com/news/how-to-pro...=nl.e703&s_cid=e703&ttag=e703&ftag=CAD090e536

 

[MitchM]

Is there any point changing your passwords now before software patches are announced?

 

[adavisus]

The natural response might be to want to change passwords immediately, but security experts suggest waiting for confirmation of a fix because further activity on a vulnerable site could exacerbate the problem

Keep a close eye on financial statements for the next few days. Because attackers can access a server's memory for credit card information, it wouldn't hurt to be on the lookout for unfamiliar charges on your bank statements.

See if the websites you use are vulnerable, input names in the link on this page: https://lastpass.com/heartbleed/

Regards, andy
http://swglist.wordpress.com/
http://www.pinterest.com/adavisus/pondering/

 

[j.w]

My hubby just gave me this link to test a specific site to see whether it could be exploited - although this doesn't mean that it has, I tried www.amazon.com and it said it was fine but if I put a small site like our forum it just says it can't tell. You have to put the www. before the site name and the .com at the end _ go here: http://filippo.io/Heartbleed/#www.motherjones.com

 

[addy1]

Well my bank is safe, cc might be vulnerable.

 

[j.w]

What is cc..........credit card?

 

[addy1]

What is cc..........credit card?

yep shorthand

 

[j.w]

Here's a list of affected and unaffected sites so far anyways. Some sites aren't affected as they don't use OpenSSL. American Express is one that does not: http://www.tjkelly.com/blog/heartbleed-website-list/

 

[j.w]

I received this bit of info today and thought I'd share for those who want to read more about this Heartbleed thingy:
http://askleo.com/why-do-i-need-to-...-heartbleed/?awt_l=GAt8x&awt_m=JnQ_PzYvnJdfbL

I added the add-on thingy to my firefox browser and it shows up right next to the right of my search box now as a little colored heart and tells me which sites are good (Green) bad (Red) or still possibly vulnerable (Yellow)

Also changed my settings in Firefox tools: In Firefox: Tools, Options, Advanced, Certificates, Validation: make sure that both “Use OSCP” and “Treat as invalid” are checked.

Oops this forum shows up yellow!

 

[addy1]

Well we know it is trusted, what will they get from here except a lot of crazy ponders.

 

[j.w]

THEY WILL STEAL ALL MY EMOTICONS........................HEAVEN FORBID!!!

 

[HARO]

A fate worse than death!
John