The Dudeism Forum

"Gary, two oat soda's!!!"

Quote from: Hominid on April 13, 2014, 11:22:58 AM
"Gary, two oat soda's!!!"

FYI

7 Heartbleed Myths Debunked.

and

What You Need To Know About Heartbleed, A Really Major Bug That Short-Circuits Web Security.

I do like ReadWrite.com.

Quote from: meekon5 on April 11, 2014, 07:48:39 AM
Yes but wait for them  to let the dust settle.


The BBC set about scare mongering and telling everyone to change all their passwords. Not allowing for "all" the sites to apply a patch first, which means if you followed the herd and did change all your passwords you have probably (and advisably) to go back and change them again once each site tells you they have fixed the problem.

At the moment I only have two sites that have asked me to change my password, Pinterest, and Issu.

As Hominid mentioned:

Quote from: Hominid on April 12, 2014, 10:27:03 PM
...*after* your service provider has patched their OpenSSL software.

it's only sites using OpenSSL that are effected.

But I am King of the Anal Retentives and have different passwords for different sites all fifteen characters (plus) long with numbers and none alphanumerics in them. I have a special spreadsheet that runs them up for me by a set of random processes.

It's not just a patch that's required - the SSL certificates need to be replaced on affected sites as well. If you reset your password over an SSL connection that's potentially compromised, you aren't really safe. 95% of the misinformation about heartbleed being passed around is based on this omission.

After a week of this bullshit I'm just about ready to throw in the towel. My major accounts are safe, so I'm ready to just say "Fuck it." and walk out the door.

I was going to come here and ask about this board, but I don't see SSL anywhere. The casualness here is quite impressive!

I haven't read into it but I thought this was only affecting xp users ?

Quote from: milnie on April 14, 2014, 02:41:50 PM
I haven't read into it but I thought this was only affecting xp users ?

OpenSSL is an encryption protocol that 3/4 of the internet uses... financial institutions, ISPs, etc.  When you go to a "secure" website, well, guess what - they found out it wasn't! 

But pornhub is still safe, right ;)

Send me your account info and I'll let you know.

You mean you haven't got it already.

Your response should be:

I will send you your account details.

Please open this link:

....

One step ahead of me!

You almost had me there ;0

Good porn here
http://youtu.be/dQw4w9WgXcQ

Why does anyone need anyone else's porn login? Who still uses porn logins? Who still pays for porn?

I'm confused - is this 1998? Did I fall asleep in a time machine?

Quote from: Yeti on April 16, 2014, 03:12:02 AM
Why does anyone need anyone else's porn login? Who still uses porn logins? Who still pays for porn?

I'm confused - is this 1998? Did I fall asleep in a time machine?

In the world of the lazy end user you can almost guarantee that their "Porn Login" is the same password (and probably user name) as some of their other accounts so you just  do a simple search across some web sites (e-mail and IP give some very interesting results) and can get into all sorts of things.