--> What Is The Heartbleed Bug? Everything You Need To Know | Experience Lab - Online business creation and development guide for bloggers and startups

What Is The Heartbleed Bug? Everything You Need To Know

What is this 'Heartbleed' everyone is suddenly talking about? I won't blame you if you're as clueless as I was when I fir...


Heartbleed Bug


What is this 'Heartbleed' everyone is suddenly talking about? I won't blame you if you're as clueless as I was when I first heard about it. The term suddenly exploded as if out of nowhere, and had me thinking; meh, it's probably another messaging app that someone has discovered a bug with. But no. Heartbleed is a major security bug that was discovered Codenomicon, a software security firm, and a member of Google's security team. It is a serious security threat that has the potential to expose users' private information, including passwords, financial details and instant messages, among other things. So if security is one of your concerns, you need to read this!


The Heartbleed Bug



The Heartbleed bug is a vulnerability in the OpenSSL security used by millions of websites on the web These include websites for e-commerce, online shopping stores, banks, email providers, and so on - places where a security breach can hurt you most.


How does it work?



The bug leaves open a hole that allows hackers to get in and around the encryption between you and the site. This means that the information stored on the servers, and passed between you, could be stolen! This information can include username/password combinations, personal details and addresses, credit card information, and so on! According to the guys at Codenomicon:



The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs).





The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users.



Here's a nice little comic that's been going around the internet demonstrating the workings of the bug.




The Heartbleed bug




The bug, as demonstrated is dangerous yet very simple, which explains why it had never been identified before. It's a loophole in code, and not an attack or a virus that you can defend against.


Will it effect me?




Obviously! The bug has affected all websites and services running on OpenSSL. These include Facebook, Pinterest, Instagram, Tumblr, Google, Yahoo, Amazon, GoDaddy, GitHub, and Dropbox to name just a few. Many of these websites have already addressed the vulnerability with a patch.





But there isn't much you can do on your part to improve your personal security. Changing passwords won't help you much at this point, but you can go ahead and do it anyway. It is advisable to lay off any online purchases you want to make until the dust settles down.






Furthermore, you can use the Heartbleed Bug checker to see whether the website you are visiting has addressed their vulnerability or not. You can also use LastPass’s SSL date checker to see if the server of the website has updated its SSL certificate recently.





Additionally, if you run your own website, the best thing you can do is update your OpenSSL immediately! Many good web hosting companies will do this for you.





Got any questions to ask? You know where to ask 'em. Cheers :)

COMMENTS

Name

Affiliate Marketing,12,Announcement,34,Bing,9,Bitcoin,38,blog,7,Blogger Resources,42,Blogger Templates,4,blogger tricks,156,Blogging ethics,70,Blogging tips,198,Bugs and Errors,34,Business,4,Copyright Violation,9,CSS and HTMLTricks,95,Designs,8,drop down menu,7,eBook,12,Email Marketing,7,Events,30,Facebook,30,Facebook tricks,49,Google,157,Google AdSense,42,Google Analytics,7,Google Plus,51,Google Plus Tricks,38,Guest Posts,112,home,2,How To,77,Internet,1,JSON Feeds,25,Kitchen Recipes,2,Label Based Sitemap Themes,1,Make Money Online,108,Marketing,16,MBT Blogger Templates,7,Menus,1,News,146,Pages,1,Posts,10,presentations,15,Responsive,10,Reviews,7,SEO,307,Settings,6,Shortcode,15,Sitemap Themes,1,Social Media,155,Technology,3,Templates,1,Tips,2,Tools,1,Traffic Tips,80,Video,19,Web Designing,62,web hosting,18,Webmaster Tools,97,Widgets,199,wordpress,26,
ltr
item
Experience Lab - Online business creation and development guide for bloggers and startups: What Is The Heartbleed Bug? Everything You Need To Know
What Is The Heartbleed Bug? Everything You Need To Know
http://2.bp.blogspot.com/-DzKBADFbnWY/U0vYIRDLtCI/AAAAAAAAFmk/ow-NVRCylPA/s1600/heartbleed-bug.jpg
http://2.bp.blogspot.com/-DzKBADFbnWY/U0vYIRDLtCI/AAAAAAAAFmk/ow-NVRCylPA/s72-c/heartbleed-bug.jpg
Experience Lab - Online business creation and development guide for bloggers and startups
https://www.experiencelab.info/2014/04/what-is-heartbleed-bug-everything-you.html
https://www.experiencelab.info/
https://www.experiencelab.info/
https://www.experiencelab.info/2014/04/what-is-heartbleed-bug-everything-you.html
true
2959477579779989044
UTF-8
Loaded All Posts Not found any posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU LABEL ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS PREMIUM CONTENT IS LOCKED STEP 1: Share. STEP 2: Click the link you shared to unlock Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy