Skip to main content

Internet users told to change ALL passwords in security alert over 'catastrophic' Heartbleed bug

LastPass Heartbleed Checker warns if a website may be at risk. It also reveals websites that aren't affected


As a result, personal information such as passwords and credit card details has been accessible.
Heartbleed, so called because it creates a ‘bleeding’ leak of security, is a flaw in OpenSSL, the software used by the majority of websites to keep data secure.
The programme works by encrypting data – such as emails, instant messages, bank details or passwords – making it look like nonsense to hackers.
When a line of communication is secure and information encrypted, the user sees a padlock on the page. When software is active, one computer may send a ‘heartbeat’ – a small packet of data – to check there is still another computer at the other end.
However, a flaw in the programming meant it was possible to trick the computer at the other end by sending it a packet of data that looked like one of these heartbeats. This made it possible for hackers to impersonate the website and steal the encryption keys, revealing the data being sent.

The bug was found simultaneously by a Google security researcher and a small Finnish security firm named Codenomicon and disclosed on Monday night.
Many companies have installed a ‘patch’ to fix the flaw, but there are still many that are vulnerable as service providers must install the update.
Furthermore, it is not known whether hackers had used it before the bug came to light – it went undiscovered for two years – as doing so would not leave a trail.

One of the worst affected sites was Yahoo!, who posted a warning on their blogging site Tumblr to say: ‘The little lock icon we all trusted to keep our passwords, personal emails, and credit cards safe, was actually making all that private information accessible.’
A spokesman for Codenomicon said: ‘If people have logged into a service during the window of vulnerability then there is a chance that the password is already harvested.
‘In that sense it’s a good idea to change the passwords on all the updated web portals.’
However, researcher Mark Schloesser said changing a password on websites that have not fixed the bug could reveal ‘both the old and new passwords’ to an attacker.
By Rebecca Evans and Tania Steere

Comments

Popular posts from this blog

The Rich Kids of Russia: Instagram mocks the children of oligarchs photographed posing beside luxury golden cars, mansions and private jets

An anonymous Instagram account revealing the lifestyles of the rich children of Russian oligarchs has become an internet sensation. The biography of the anonymous profile says it is dedicated to documenting the lives of the kids from Russia growing up in luxury.  The account specializes in collecting photos of rich Russian kids that they post online themselves, with everything from luxury cars through to selfies with expensive cars, boats or famous people.

Britain sends envoy to Zimbabwe ahead of inauguration

Britain’s Africa minister Rory Stewart arrived in Zimbabwe on Thursday for wide-ranging talks, ahead of the inauguration of a new president following Robert Mugabe’s dramatic departure.

Stewart is due to meet political and business leaders, as well as human rights groups and NGOs, the UK foreign ministry said in a statement.

His arrival in the capital Harare comes just days after Mugabe’s resignation on Tuesday, ending his 37-year rule as MPs gathered in parliament to impeach their 93-year-old leader. Stewart described the historic change as “an absolutely critical moment” following 

Anambra election: Non voters refused access to Onitsha-Enugu expressway, others

One of the military personnel told NAN under anonymity that only accredited vehicles were allowed to pass through the road block.

In Ifte-Awka, Okpuno, Amawbia, Nibo and Umudioka, all in Awka South Local Government, security personnel were seen at all the major junctions and polling units.

At Aroma Junction in Awka, INEC presiding officer, Mr. Joshua Ejimbi, told NAN that he was happy with the level of security at the centre.

A local observer from the Centre for Citizens with Disability, Mr. David Anyamele, also corroborated the position of Ejimbi on security and applauded various security organisations for massive deployment of their personnel for the election.