HEARTBLEED

[Shadow Yoshi]

We don't use SSL here, but yeah, this is pretty major.

[Mable]

This week it has emerged that a major security flaw at the heart of the internet may have been exposing users' personal information and passwords to hackers for the past two years.

That may have been exposing user's personal information and passwords to hackers

Exactly the same sentence like on any other shit that happened it is always oh shit this exposed this and that you so going to get hacked you could tell this Heartbleed is already hacking into you and the stuff.
They all the same things which may expose something.

[Julia Pseudo]

Oh yeah I heard about this. Do we have any idea if anyone actually used this for anything significant? I know there have been some relatively high-profile security breaches in recent years, but this is a really gigantic deal. Good to here the forums don't use SSL, by the way.

[FutureNyanCat]

Uh oh, I still have a Windows XP PC, and I'm in danger of magnetizing the HEARTBLEED. This is why you should update to WINDOWS 7 or higher.

[aero]

I don't get why this is such a major issue. Sure, a lot of sites use SSL for encryption of passwords, but people work around the clock patching security issues like these. Besides that, the general public never usually knows about stuff like this until after a patch has been made.

[Danny]

I'm not taking this seriously, because usually, by time everyone knows about this, everything is all patched up, just like that big Java leak that everyone flipped shit about a couple years(?) ago. Not once have I had my passwords stolen, and I barely even change them. I feel as if this is just something to get people that listen to the media all worried, because they make it sound more serious than it actually is.

[Julia Pseudo]

I just heard that the NSA apparently knew about this and used it for years without telling anyone about it, but that's probably a discussion for a whole other topic.

[aero]

I just heard that the NSA apparently knew about this and used it for years without telling anyone about it, but that's probably a discussion for a whole other topic.

It really is though, I mean the NSA already has everyone and their mother's data to begin with from programs designed for surveillance and not some security screw-up.

Anyway, I don't think anything has been damaged from this HeartBleed "scare" except for SSL's integrity. I still have yet to hear of anyone's passwords actually being compromised...

[Mable]

Uh oh, I still have a Windows XP PC, and I'm in danger of magnetizing the HEARTBLEED. This is why you should update to WINDOWS 7 or higher.

Can people stop telling others to upgrade? ITs their own fault.

[Shadow Yoshi]

I think it moreso damaged OpenSSL's integrity as a module, if anything; not SSL itself.

A bit of a correction on my end - I don't use OpenSSL at all for anything on this server simply because I can't afford a certificate. However, my provider most definitely uses it for their stuff so it's not to say someone couldn't infiltrate their system (and therefore my server) somehow.

Pretty sure the OpenSSL team patched it anyway, though.

[FutureNyanCat]

Shhh, calm down. They don't even care if they still have Windows XP. If a restaurant managing recipes on their PC gets hijacked, what would happen to the food?

[FutureNyanCat]

Ok, sorry for the double post, but while I was reading news on my Windows 8 PC - it appears Heartbleed also affects ANDROID SMARTPHONES running 4.1.1 Android Jelly Bean. Version 4.1.1 seems to be running a vulnerable version of OpenSSL, so this is why you should update to 4.1.2 and beyond.

[Mable]

*Smashes her Phone*

Oh wait a second that wasn't mine it was you know who i mean his phone.
Oh yeah not strange at all it affects Android but not freaking Apple.