The Heartbleed Hit List: The Passwords You Need to Change Right Now!

Among the websites affected by the Heartbleed vulnerability:
Facebook, Instagram, Google, Yahoo, Amazon web services, GoDaddy and many more. For more information about the problem and a complete list of websites visit:

http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/

Does it really make a difference? If you have facebook and twitter and google, you gave it all away anyhow.

But I did notice that healthcare.gov wasn't effected, now why would that be? Sort of like the IRS, why steal when everyone just volunteers.

It's called the Heartbleed bug, and it is essentially an information leak.

It starts with a hole in the software that the vast majority of websites on the Internet use to turn your personal information into strings of random numbers and letters. If you see a padlock image in the address bar, there's a good chance that site is using the encryption software that was impacted by the Heartbleed bug.

"It's probably the worst bug the Internet has ever seen," said Matthew Prince, CEO of website-protecting service CloudFlare. "If a week from now we hear criminals spoofed a massive number of accounts at financial institutions, it won't surprise me."

The worst part of all this? The bug is believe to be 2 years old and the code was just recognized!

NSA? It cracks your "https:" security encryption!

Banking
Online tax sites
Website sign in
Blog spots
School sites
Political blog posts

EVERYTHING you thought secure!

Funny that many corporate media sites are saying it's "hype", but all the big online companies are working around the clock and spending MILLIONS to eliminate the bad code....

But it's "hype"..... like we were told about IRS targeting, Obozocare, and Benghazi

CNN is spending MEGA time and money to delete it...... think it's hype?

NSA Said to Exploit Heartbleed Bug for Intelligence for Years

The U.S. National Security Agency knew for at least two years about a flaw in the way that many websites send sensitive information, now dubbed the Heartbleed bug, and regularly used it to gather critical intelligence, two people familiar with the matter said.

The NSA’s decision to keep the bug secret in pursuit of national security interests threatens to renew the rancorous debate over the role of the government’s top computer experts.

Heartbleed appears to be one of the biggest glitches in the Internet’s history, a flaw in the basic security of as many as two-thirds of the world’s websites. Its discovery and the creation of a fix by researchers five days ago prompted consumers to change their passwords, the Canadian government to suspend electronic tax filing and computer companies including Cisco Systems Inc. to Juniper Networks Inc. to provide patches for their systems.

http://www.bloomberg.com/news/2014-04-11/nsa-said-to-have-used-heartbleed-bug-exposing-consumers.html

Figures! I still think they created it!

Must be true, Gov already denying.

http://bnowire.com/inbox/?id=2307



For the proper level of paranoia, you should be using linux open source firmware on your router:

DD-WRT is a Linux based alternative OpenSource firmware suitable for a great variety of WLAN routers and embedded systems. The main emphasis lies on providing the easiest possible handling while at the same time supporting a great number of functionalities within the framework of the respective hardware platform used.

The Heartbleed vulnerability in discovered in OpenSSL 1.0.1 - 1.0.1f is one of the most serious matters in encrypted data communication during the last years. First of all we can ensure you that the encrypted web services like the DD-WRT Online Shop and the Activation center never have been affected because the OpenSSL version we are using does not contain the vulnerability.

Currently the main focus of the Heartbleed discussion lies on web servers using SSL/TLS but other services on Linux systems are also using OpenSSL. By default none of these services is enabled in DD-WRT - nevertheless it is important that you check your router settings to find out if you might be affected by Heartbleed.

http://www.dd-wrt.com/site/index

No, I don't think it hype just funny in the analogy of things. People get all scared about bugs but have absolutely no compunction about sharing all on social media.

Also, all browsers tell every web site you visit everything they want to know about you. Now I use FireFox due to a little better control of some add-ins to slow things down, but even it releases way too much. Even as I type 5 trackers are being blocked from this site.

Now I considered TOR but even that is a joke. If you run windows, you're pretty much screwed, it broadcasts unto the world your pc's complete configuration.

So unless you are willing to spend considerable time in keeping up with open source code that hasn't been compromised as most people have no clue what that is, if you're on the internet, you're going to get something.

If NSA knew about,and actively made use of it,you can bet that every other Intelligence-Agency on the Globe knew and used it!

Here is a interview of John McAfee yesterday by Alex Jones on this.

http://www.youtube.com/watch?v=IHjOJVbOZOk

John McAfee: Heartbleed Bug Infestation

John said it been going on for 2 years and so much more.