psa heartbleed

[Litodude]

https://filippo.io/Heartbleed/

[Untimely Friction]

Re: psa heartbleed

If I remember correctly this is a site used to determine if an https enabled site is vulnerable to the exploit?? you should say that cause if I wasnt already aware I wouldn't know, and nor will others.

[choof]

Re: psa heartbleed

If I remember correctly this is a site used to determine if an https enabled site is vulnerable to the exploit?? you should say that cause if I wasnt already aware I wouldn't know, and nor will others.

if you click on the link it tells you what this is for

[Litodude]

Re: psa heartbleed

i don't know how to read

excuse me i find your avatar offensive please take it down before i report your post

[Untimely Friction]

Re: psa heartbleed

if you click on the link it tells you what this is for

I'm curious what it is before I click a random link, sorry ^^

[Charu]

Re: psa heartbleed

Oh dear...

Also, with the heartbleed thingy. Even though it's a very real threat and all that good stuff, can't help but feel it's being blown out of proportion, lmao.

[One Winged Angel]

Re: psa heartbleed

Stay on topic and stop flamebaiting. If you legitimately think favoritism or lack of clarity in forum rules is an issue, contact admins via PM or some other facet.

[SC_coolguy44]

Re: psa heartbleed

Oh dear...

Also, with the heartbleed thingy. Even though it's a very real threat and all that good stuff, can't help but feel it's being blown out of proportion, lmao.

Ditto. Internet safety is a really good practice, but this probably isn't nearly as big of a threat as the media is blowing it out to be.

[Izzy]

Re: psa heartbleed

I find it weird that this is even a real exploit. I remember learning about memory hacks like this and how to avoid them with error checking when writing C code in school. What were the developers thinking when they wrote this code? I was kind of under the impression that all of these developers were incredibly smart. Not saying I could have done any better, but when writing internet security libraries I would kind of be paranoid as fuck about this exact kind of problem.

[dAnceguy117]

Re: psa heartbleed

I think it's worth coverage from the media. it affected a ton of the internet, and the internet is used by a lot of people.

tumblr and Slack () both sent out emails warning that the sites were using vulnerable versions of OpenSSL. change your passwords! and if you use the same password across multiple sites, take extra caution. shame on you, by the way.

[choof]

Re: psa heartbleed

Ditto. Internet safety is a really good practice, but this probably isn't nearly as big of a threat as the media is blowing it out to be.

this vulnerability itself isn't a huge deal. it was patched pretty quickly

it's just that this exploit has been available for about a year and a half
that may not seem like a long time but... a fatal flaw, in what is easily the most widely used security protocol, that's been in circulation for nearly 1.5 years

[Reincarnate]

Re: psa heartbleed

Most of the big sites have fixed things up, so hopefully good to go from there

[Litodude]

Re: psa heartbleed

Stay on topic and stop flamebaiting. If you legitimately think favoritism or lack of clarity in forum rules is an issue, contact admins via PM or some other facet.

i already won

[adlp]

Re: psa heartbleed

aw dangit i missed an argument. who was it with lito

[choof]

Re: psa heartbleed

it was with untimely friction: the mod that literally no one on staff knows anything about