{"id":187,"date":"2014-04-12T08:05:57","date_gmt":"2014-04-12T14:05:57","guid":{"rendered":"http:\/\/www.businesstechnologyassociates.com\/blog\/?p=187"},"modified":"2016-01-16T15:49:21","modified_gmt":"2016-01-16T22:49:21","slug":"heartbleed-bug-end-of-the-world-or-non-event","status":"publish","type":"post","link":"https:\/\/www.businesstechnologyassociates.com\/blog\/2014\/04\/heartbleed-bug-end-of-the-world-or-non-event\/","title":{"rendered":"Heartbleed Bug &#8211; End of the World or Non-event?"},"content":{"rendered":"<p><a href=\"https:\/\/xkcd.com\/1353\/\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-188\" src=\"\/blog\/wp-content\/uploads\/2014\/04\/heartbleed.png\" alt=\"heartbleed xkcd comic\" width=\"740\" height=\"307\" srcset=\"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-content\/uploads\/2014\/04\/heartbleed.png 740w, https:\/\/www.businesstechnologyassociates.com\/blog\/wp-content\/uploads\/2014\/04\/heartbleed-300x124.png 300w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/a>That about covers the risks.\u00a0 Now what can you do about it?\u00a0 First, update your computer (Windows, Mac OS X or Linux\/Unix), right now!\u00a0 Before you read the rest of this post.<\/p>\n<p>Most software vendors\/service providers recognized the serious nature of this bug and updated their software (the easy part).\u00a0 So getting the fix is usually easy. The biggest problem is trying to determine if your information has been compromised.\u00a0 You can&#8217;t!\u00a0 Attacks leave no trace or very little on the computers that gave up their private secrets.\u00a0 This bug has been out in the wild for 2 years!\u00a0 Maybe nobody found it and took advantage OR somebody did and has all our passwords.\u00a0 N.S.A is that you?\u00a0 The actual risk is probably somewhere in between those extremes.<\/p>\n<p>Most security experts are recommending that we change all our passwords and replace all of our SSL certificates.\u00a0 At the very least change your password on you bank account log-in, but you probably don&#8217;t need to change your Facebook password (everybody has all that info).\u00a0 And definitely change your password if you use one password for everything.\u00a0 Yea, it is hard to remember all of them, but you can let your computer do the remembering.\u00a0 Start using a <a title=\"Keeping track of passwords\" href=\"\/blog\/2010\/03\/keeping-track-of-passwords\/\">password safe<\/a> like <a title=\"KeePass website\" href=\"https:\/\/keepass.info\/\" target=\"_blank\">KeePass<\/a> or <a href=\"https:\/\/www.keepassx.org\/\" target=\"_blank\">KeePassX<\/a> to create and store long secure password using one password, that you have to remember, to save them on your system in an encrypted file.<\/p>\n<p>More info about Heartbleed Bug:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.us-cert.gov\/ncas\/current-activity\/2014\/04\/08\/OpenSSL-Heartbleed-Vulnerability\" target=\"_blank\">United States Computer Emergency Readiness Team (US-CERT) notice<\/a><\/li>\n<li><a href=\"https:\/\/www.kb.cert.org\/vuls\/id\/720951\" target=\"_blank\">Carnegie Melon Software Engineering Institute Vulnerability Note VU#720951<\/a><\/li>\n<li><a href=\"http:\/\/www.nytimes.com\/interactive\/2013\/09\/05\/us\/documents-reveal-nsa-campaign-against-encryption.html?_r=1&amp;\" target=\"_blank\">N.S.A. Campaign Against Encryption<\/a><\/li>\n<li><a href=\"http:\/\/heartbleed.com\/\" target=\"_blank\">Heartbleed.com<\/a>\u00a0 A bug with it&#8217;s own web-site! <a href=\"http:\/\/heartbleed.com\/\"><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-194 alignnone\" src=\"\/blog\/wp-content\/uploads\/2014\/04\/heartbleed1-247x300.png\" alt=\"heartbleed\" width=\"89\" height=\"108\" srcset=\"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-content\/uploads\/2014\/04\/heartbleed1-247x300.png 247w, https:\/\/www.businesstechnologyassociates.com\/blog\/wp-content\/uploads\/2014\/04\/heartbleed1.png 341w\" sizes=\"auto, (max-width: 89px) 100vw, 89px\" \/><\/a><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>That about covers the risks.\u00a0 Now what can you do about it?\u00a0 First, update your computer (Windows, Mac OS X or Linux\/Unix), right now!\u00a0 Before you read the rest of this post. Most software vendors\/service providers recognized the serious nature of this bug and updated their software (the easy part).\u00a0 So getting the fix is &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.businesstechnologyassociates.com\/blog\/2014\/04\/heartbleed-bug-end-of-the-world-or-non-event\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Heartbleed Bug &#8211; End of the World or Non-event?&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,5,10,7,6,17,3],"tags":[26,25,24],"class_list":["post-187","post","type-post","status-publish","format-standard","hentry","category-business","category-internet","category-linux","category-macintosh","category-windoze","category-security","category-technology","tag-bug","tag-openssl","tag-ssl"],"_links":{"self":[{"href":"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-json\/wp\/v2\/posts\/187","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-json\/wp\/v2\/comments?post=187"}],"version-history":[{"count":10,"href":"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-json\/wp\/v2\/posts\/187\/revisions"}],"predecessor-version":[{"id":268,"href":"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-json\/wp\/v2\/posts\/187\/revisions\/268"}],"wp:attachment":[{"href":"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-json\/wp\/v2\/media?parent=187"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-json\/wp\/v2\/categories?post=187"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.businesstechnologyassociates.com\/blog\/wp-json\/wp\/v2\/tags?post=187"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}