[READ] [2/3 of PASSWORDS EXPOSED] All internet passwords exposed.

Apr 9, 2014 07:43 AM

Change your passwords for everything.

So as some of you may know, a few hours ago a bug in SSL was made public. This bug is called heartbleed, and affected 2/3 of the internet by exploiting memory leaks to give the hacker usernames, passwords and content. As I am a nice person, I just wanted to warn users about this, and I strongly urge everyone reading this to change thier password for everything, as I am doing now.

There probably are other threads about this, but all users may not still be aware.

Read up on this more:
http://www.theepochtimes.com/n3/609175-h...s-at-risk/

http://heartbleed.com/

http://www.theguardian.com/technology/20...of-servers

http://www.bbc.co.uk/news/technology-26935905

http://lifehacker.com/what-the-heartblee...1560801201

Apr 9, 2014 07:45 AM

Uh.
There has been no proof of a hacker exploiting this in the wild.
If you have 2FA you shouldn't be bothered by this either.

Apr 9, 2014 07:47 AM

(Apr 9, 2014 07:45 AM)xhflhkeuhwguu34 Wrote: Uh.
There has been no proof of a hacker exploiting this in the wild.
If you have 2FA you shouldn't be bothered by this either.

No, but read the second link and you will see that people could hack themselves.

Apr 9, 2014 07:51 AM

(Apr 9, 2014 07:47 AM)~Jay~ Wrote: It isn't necessarily true that two thirds of all passwords have been leaked, just that two thirds of servers used the vulnerable software. There's no guarantee that the servers were vulnerable, or even the vulnerable ones you used were hacked, or that your password was in the memory dump when it was hacked. They don't even know if heartbleed was widely used or not.

This bug had been known for 2 years, and a few hours ago many, many people were made aware of it. Of course there is no guarantee (as the bug leaves no trace), but there is a huge chance.

Apr 9, 2014 07:54 AM

(Apr 9, 2014 07:51 AM)thehen101 Wrote: This bug had been known for 2 years, and a few hours ago many, many people were made aware of it. Of course there is no guarantee (as the bug leaves no trace), but there is a huge chance.

It has not been known for two years.
It may have been in the code for two years but certainly not known.

Apr 9, 2014 09:24 AM

I change all my passwords every month or two, so I guess I'll do it early this April. Good heads up, OP.

Apr 9, 2014 09:47 AM

(Apr 9, 2014 09:32 AM)Ap‌‌ Wrote: Heartbleed only allow's the attacker to grab 64K of memory. Sure it can be ran over and over again but it would take a GREAT amount of time to do this to multiple websites on the web. I posted an example of the heartbleed exploit dump.

Spoiler (Click to View)

Yeah, that shows that it is possible. This has been in circulation fo a while, and even though the chance that many people affected is small, there's still a chance. If a group of people were to concentrate on one server for a while, sooner or later they would strike gold and reveal sensitive information.

Apr 9, 2014 09:52 AM

(Apr 9, 2014 09:50 AM)Aura Wrote: OKAY STOP POSTING NEW THREADS ABOUT THIS EVERY HOUR.
We already have 3-4 threads dedicated to this, USE THEM.

you should make a thread telling people to stop making threads about it

Apr 9, 2014 09:56 AM

(Apr 9, 2014 09:52 AM)xhflhkeuhwguu34 Wrote: you should make a thread telling people to stop making threads about it

I originally posted this in the lounge, I'm actually quite glad there are threads about this because it shows that people on HF still have a small amount of 'care for the community'.

Some websites are still vulnerable:
http://filippo.io/Heartbleed/#avazutracking.net

Jun 16, 2014 01:53 PM

lol. I was hoping this was easily replicated.

Jun 16, 2014 01:55 PM

(Jun 16, 2014 01:53 PM)jde1126 Wrote: lol. I was hoping this was easily replicated.

Thank you for posting on something from 2 months ago.

Login
Username/Email:
Password:	Lost Password?
	Remember me