Our server costs ~$56 per month to run. Please consider donating or becoming a Patron to help keep the site running. Help us gain new members by following us on Twitter and liking our page on Facebook!
Current time: January 9, 2025, 4:23 am
Atheist Forums › Site Specific › Announcements v
OpenSSL Vulnerability

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Thread Modes
OpenSSL Vulnerability
Tiberius Offline
Question Everything.
*******
Religious Views: Atheist
Posts: 14932
Threads: 684
Joined: August 25, 2008
Reputation: 143
#1
OpenSSL Vulnerability
April 8, 2014 at 9:23 am
For those of you following tech news, there is quite a serious vulnerability affecting OpenSSL at the moment: http://www.bbc.co.uk/news/technology-26935905

Full (technical) details here: http://heartbleed.com

I patched the server this morning as soon as our vendor released the update, and all services that had the old OpenSSL loaded have been restarted. As far as I am aware, the server wasn't attacked using this vulnerability so all should be well.

- Tiberius
Find
Reply
MindForgedManacle Offline
Metametaphysicist
***
Religious Views: Atheist
Posts: 1152
Threads: 42
Joined: July 8, 2013
Reputation: 23
#2
RE: OpenSSL Vulnerability
April 9, 2014 at 11:57 pm
Damn, a site I admin uses OpenSSL too, including to generate pseudo-random strings. :/
Find
Reply
Tiberius Offline
Question Everything.
*******
Religious Views: Atheist
Posts: 14932
Threads: 684
Joined: August 25, 2008
Reputation: 143
#3
RE: OpenSSL Vulnerability
April 19, 2014 at 1:53 pm
Update: Our CA offered to re-issue a new certificate and I just installed it.
Find
Reply
Jackalope Away
Elon Musk owes me money
*******
Religious Views: Absent
Posts: 30982
Threads: 204
Joined: July 19, 2011
Reputation: 141
#4
RE: OpenSSL Vulnerability
April 19, 2014 at 3:18 pm
I was part of the team that analyzed my employer's vulnerability.

The good news - we aren't vulnerable - because our stuff is too old. We're still on OpenSSL 0.9.7 - 0.9.8. Dodgy
Find
Reply
Sejanus Offline
Praetorian Prefect
***
Religious Views: Atheist
Posts: 954
Threads: 24
Joined: October 7, 2013
Reputation: 26
#5
RE: OpenSSL Vulnerability
April 19, 2014 at 7:38 pm
I like how this guy explains it
https://www.youtube.com/watch?v=q-zfPwtlFzA
[Image: thfrog.gif]



Find
Reply
LastPoet Offline
Leader of the gang of jerkoffs(tm)
*****
Religious Views: L'Uomo verrà portato dalla sua creazione
Posts: 18503
Threads: 79
Joined: May 29, 2010
Reputation: 125
#6
RE: OpenSSL Vulnerability
April 19, 2014 at 8:59 pm
Meh. If only hitler was just as bad ass as tibs on internet security, perhaps we would be speaking german by now.
Find
Reply


Atheist Forums › Site Specific › Announcements v
OpenSSL Vulnerability



Users browsing this thread: 1 Guest(s)