Big security hole in OpenSSL

on

Heartbleed is a bug in OpenSSL which allows an attacker to read the memory of a server. Since many websites including some of the biggest site use “OpenSSL” everyone’ s secure passwords may be at risk.

On April 7, 2014, it was announced that OpenSSL 1.0.2-beta, as well as all versions of OpenSSL in the 1.0.1 series except 1.0.1g had a severe memory handling bug in their implementation of the TLS Heartbeat Extension.

See full episode!

Heartbleed Server Test – see if your favorite sites have been fixed.

Fix your browser!

To protect yourself from Heartbleed is for your browser to check for revoked security certificates. In Chrome go to “Settings”, “Show advanced settings”, “HTTPS/SSL” and put a check-mark in “Check for server certificate revocation”.

 

Leave a comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.