Unnecessary password reset on the Internet due to Heartbleed

An unprecedented "wave" of code change seems to drive the Internet because of the revelations about the most notorious bug heartbleed, which affects a huge number of servers and web sites around the world.

Already several companies in its field have started urging their users to change their passwords, especially on email, file storage and e-banking services, as Heartbleed is now being labeled as one of the biggest security threats the internet has seen.

heartbleed

One of these was Yahoo's blogging / social networking platform, Tumblr. The Canadian tax office has also stopped its online services.

It is recalled that the bug is found in the OpenSSL software, which is used to encrypt data passing through servers so that only the service provider and recipients can "read" it. According to Google Security and Finland's Codenomicon, the problem has existed for over years. It made it possible to intercept the "keys" of online services, making it possible to eavesdrop on user names and passwords, as well as to create fake websites that looked authentic because they used the stolen passwords.

According to a report by the BBC, Google is believed to have informed a number of operators about the issue before it went public, so that they could upgrade to new of OpenSSL.

As stated in a CNET article, there are reports from executives of companies in its field and developers to detect/hack Yahoo passwords through Heartbleed exploit. According to the publication, Yahoo has taken related actions, making corrections to: Yahoo Homepage, Yahoo Search, Yahoo Mail, Yahoo Finance, Yahoo Sports, Yahoo Food, Yahoo Tech, Flickr, Tumblr.

Developer and Encryption Advisor Filip Valsoranda developed a tool that allows users to check websites about whether they are vulnerable due to Heartbleed.

A Mashable article suggests changing codes to a range of popular services, even if many of them have not been identified as a matter of fact or not. In any case, the overall perception of the issue on the Internet seems to be the proactive code change to important services that users often use.

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.087 registrants.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).