I Implore You To Change Certain Passwords Due To Heartbleed

[onehandle]

I'm getting more and more info from colleagues that the worst is yet to come if service users don't take action.

The good news is that since Dropbox just hired Kindasleazy Rice, you can just delete that particular service.

More info on that hypocrisy here:
http://www.democraticunderground.com/1014777401

The Heartbleed Hit List: The Passwords You Need to Change Right Now
http://mashable.com/2014/04/09/heartbleed-bug-websites-affected

[NightWatcher]

1. hasn't it been going on for 2 years?

if you haven't had issue to this point....

[onehandle]

7. With all the publicity, there is a gold rush to take advantage of it. nt

[el_bryanto]

2. Thanks for the update

A shame about Dropbox - as it's useful - and i'm sort of mandated to use it in a limited way for work.

Bryant

[woodsprite]

3. Same here, but won't be using it for my own stuff from now on. n/t

[hlthe2b]

5. I use it for non-sensitive work stuff. I won't use it or other cloud apps for anything personal.

Look at all the social media crap on that list. 'Glad that I have abstained and deleted google account a year or more ago.

[hlthe2b]

4. Agree... Changed all mine as soon as that list came out, but...

unfortunately, that follows the barn door being open for two years. Sigh....

[sinkingfeeling]

6. Why did my office computer just tell me the second link is unsafe?

[Bluenorthwest]

8. As did mine, a huge altert.

nt

[Skinner]

9. That is a great list.

Thank you.

[seveneyes]

10. Just delete Dropbox? Really?

When your employer requires you to use Dropbox, I don't think it is quite that simple of an action to just delete Dropbox.

[onehandle]

11. There will be exceptions.

Change your password.

[seveneyes]

12. Agree

While it's not my employer, nor do I use it, the person that has to use it did the password change.

[Sissyk]

13. Hey, thanks!

I'm in very good shape overall. No social media, only one or two others like gmail and google. Easy enough to change those.

[WhiteTara]

14. Thanks for the prompt to remove dropbox. I've been

procrastinating, but now it's gone.

[gerogie2]

15. The Internet is not secure. Be Smart & Protect Yourself today.

Period. Everything that is accessible via the Internet can be hacked into. The encryption used on the Internet is between the web browser and the web server. The data on your hard drive and at the web server storage is not encrypted. A hacker can gain access to steal the database of information from the web server & the cloud. If your smart you will put a credit freeze at all 5 credit reporting agencies and at the IRS with Form 14039. Otherwise in the near future you will be in the hell of ID theft and be stuck writing letters and submitting endless affidavits for years to come. You're lucky if you act today. I was first an ID theft victim 20 years ago and there was no protection for me like there is for you today, so be smart and protect yourself and your family by acting preemptively.

[Xithras]

16. While it's important to change your passwords anyway...

...keep in mind that, as of now, there still haven't been any information leaks traceable to this bug prior to it's public announcement. A number of log searches were initially thought to have revealed evidence of Heartbleed scans prior to that announcement, but all have now been traced to other unrelated security scans. The only claimed exploit, at this point, is the unnamed anonymous source who claimed that the NSA used it. Given the braggadocio that tends to surround many hacking groups, it's hard to believe that nobody has revealed their use of the bug yet.

It's increasingly looking like we may have dodged a bullet. It's like coming home after a long day at work and realizing that you forgot to lock your front door after leaving for the morning. Sure, it was a massive security hole and someone could have robbed you blind, but that doesn't necessarily mean that someone did.

Given what I do for a living, I'm watching closely for reports of confirmed attacks from the bug. So far, all of the confirmed attacks seem to have popped up AFTER it was announced.

But change your passwords anyway.

[KamaAina]

17. Hmmm. Not one financial site seems to be affected.

Or so they say.