Heartbleed Bug

[NightHawk]

A major software security flaw has just been published.

Read about the Heartbleed Bug on the BBC website, and take whatever steps you deem necessary.

[ideasguy]

Google Security and Codenomicon - a Finnish security company - revealed on Monday that a flaw had existed in OpenSSL for more than two years that could be used to expose the secret keys that identify service providers employing the code.

They were a bit slow to react, weren't they!

[Pensioner]

My major security software is Malwarebytes Anti-Malware, which has a very good reputation at killing off all malware.  I upgraded to its latest (free) version this week and noted that in their blog they recommend controlling and managing your passwords with LastPass available (again free) from https://LastPass.com/  LastPass also detects if you have any vulnerability in any site to the Heartbleed problem.  For those running websites and the like (blogs too) may wish to ask their host if they have patched against the bug.  Heartbleed owes its "success" if that is the right word to inherent laziness in a) changing passwords, and b) not using unique strong passwords.  How many people use the same password for all site log-ins? 

[ideasguy]

Hi Richard, good to hear from you again!

Personally, I am very wary of free software . I believe in the old saying "theres no such thing as a free lunch"!
When it comes to passwords, I'd be even more careful.

Good advice from you on not using the same password for everything.
I have always had unique passwords. I don't know how I remember them .
Having to change (and then remember) so many in one short period has been a challenge

[barryl]

I also use Malwarebytes but I pay for my version (it does scans and stuff that the free version does not).

If they recommend something I rekon I would trust it.