#codenomicon

[tvaraj]

The Heartbleed Bug Causes Vulnerability in the OpenSSL

The Heartbleed Bug Causes Vulnerability in the OpenSSL

.  . By T.V. Antony Raj .

    It has now been revealed that a very serious bug was independently discovered by a team of security engineers at Codenomicon and Google Security, and they reported it to the OpenSSL team.

Antti Karjalainen, Riku Hietamaki, and Matti Kamunen at Codenomicon found the bug while improving the SafeGuard feature in their Defensics security testing tools. They reported this…

View On WordPress

[selfawarepatterns]

xkcd: Heartbleed Explanation

If you haven’t heard about it yet. the “Heartbleed” is a major security flaw that was discovered to have existed for the last couple of years on about half the servers on the web.

via xkcd: Heartbleed Explanation.

Most of the major services have applied patches.  Today might be a good day to change your passwords.

View On WordPress

[shortformblog]

It’s a serious bug in that it doesn’t leave any trace. Bad guys can access the memory on a machine and take encryption keys, usernames, passwords, valuable intellectual property, and there’s no trace they’ve been there.

Codenomicon CEO David Chartier • Discussing the nature of the "Heartbleed" vulnerability, a security hole located in SSL services that allowed people with not-so-nice purposes to tap into data meant to be secure. How big of a deal is it? Let's put it this way: You know how your web addresses sometimes say "https" instead of "http," and how that's meant to ensure your data is encrypted? That, friends, is what we're talking about.