Heartbleed bug: How this dangerous computer security vulnerability works
- 10 years ago
Originally published on April 9,2014
Check out our official website: http://us.tomonews.net/
Check out our Android app: http://goo.gl/PtT6VD
Check out our iOS app: https://itunes.apple.com/app/tomonews/id633875353
------------------------------------------------------------------------------------------------
A bug was reported in the OpenSSL protocol, which up to two-thirds of websites rely on, late Monday evening that has serious and wide-ranging ramifications, according to a report by CNN.
Internet traffic is typically easy for anyone to view, but using a protocol called SSL, the traffic between servers is encrypted.
The newly discovered bug, dubbed "Heartbleed", however, opens a window of opportunity for a hacker to listen in on the traffic between computers.
Using the bug, a hacker could randomly fish for data in the hopes of finding something valuable.
While this process may seem tedious, hackers have tools at their disposal to sift through all the data files easily.
Google, Microsoft and Apple have patched their systems, while Yahoo is said to be halfway through. There are other major tech companies that are still in the process of patching their systems, however.
OpenSSL 1.0.1g patches the bug, but it will take some time before all IT departments in the world can apply the fix to their systems.
Technology website The Verge reported that most banks, webapps and web hosting companies made the switch immediately and users are unlikely to face any immediate security threats.
The reported bug, however, is nearly 2 years old, and there is no way of telling if it has been exploited before.
Security experts are recommending that netizens change their passwords anyplace where sensitive data is currently stored.
------------------------------------------------------------------------------------------------
Welcome to TomoNews, where we animate the most entertaining news on the internets. Come here for an animated look at viral headlines, US news, celebrity gossip, salacious scandals, dumb criminals and much more! Subscribe now for daily news animations that will knock your socks off.
For news that's fun and never boring, visit our channel:
https://www.youtube.com/user/TomoNewsUS
Subscribe to stay updated on all the top stories:
https://www.youtube.com/channel/UCt-WqkTyKK1_70U4bb4k4lQ?sub_confirmation=1
Stay connected with us here:
Facebook http://www.facebook.com/TomoNewsUS
Twitter @tomonewsus http://www.twitter.com/TomoNewsUS
Google+ http://plus.google.com/+TomoNewsUS/
Instagram @tomonewsus http://instagram.com/tomonewsus
Check out our official website: http://us.tomonews.net/
Check out our Android app: http://goo.gl/PtT6VD
Check out our iOS app: https://itunes.apple.com/app/tomonews/id633875353
------------------------------------------------------------------------------------------------
A bug was reported in the OpenSSL protocol, which up to two-thirds of websites rely on, late Monday evening that has serious and wide-ranging ramifications, according to a report by CNN.
Internet traffic is typically easy for anyone to view, but using a protocol called SSL, the traffic between servers is encrypted.
The newly discovered bug, dubbed "Heartbleed", however, opens a window of opportunity for a hacker to listen in on the traffic between computers.
Using the bug, a hacker could randomly fish for data in the hopes of finding something valuable.
While this process may seem tedious, hackers have tools at their disposal to sift through all the data files easily.
Google, Microsoft and Apple have patched their systems, while Yahoo is said to be halfway through. There are other major tech companies that are still in the process of patching their systems, however.
OpenSSL 1.0.1g patches the bug, but it will take some time before all IT departments in the world can apply the fix to their systems.
Technology website The Verge reported that most banks, webapps and web hosting companies made the switch immediately and users are unlikely to face any immediate security threats.
The reported bug, however, is nearly 2 years old, and there is no way of telling if it has been exploited before.
Security experts are recommending that netizens change their passwords anyplace where sensitive data is currently stored.
------------------------------------------------------------------------------------------------
Welcome to TomoNews, where we animate the most entertaining news on the internets. Come here for an animated look at viral headlines, US news, celebrity gossip, salacious scandals, dumb criminals and much more! Subscribe now for daily news animations that will knock your socks off.
For news that's fun and never boring, visit our channel:
https://www.youtube.com/user/TomoNewsUS
Subscribe to stay updated on all the top stories:
https://www.youtube.com/channel/UCt-WqkTyKK1_70U4bb4k4lQ?sub_confirmation=1
Stay connected with us here:
Facebook http://www.facebook.com/TomoNewsUS
Twitter @tomonewsus http://www.twitter.com/TomoNewsUS
Google+ http://plus.google.com/+TomoNewsUS/
Instagram @tomonewsus http://instagram.com/tomonewsus