Heartbleed Bug - What it is & How it Affects us
If you don't know about heartbleed, kill yourself. But since you're probably reading this because you don't know what heartbleed is, kill yourself afterwards.
As of lately, there's been talk of a new bug with OpenSSL. Heartbleed.
Heartbleed obtains all data, requests, etc. through OpenSSL. Only a few versions are affected by heartbleed, but these few can really fuck us up if the webmaster, server, whoever setup OpenSSL uses a certain version.
Here's all the versions of OpenSSL that are affected by Heartbleed.
1.0.1
1.0.1a
1.0.1b
1.0.1c
1.0.1d
1.0.1e
1.0.1f
As of OpenSSL version 1.0.1g, heartbleed has been fixed.
How Does this Affect us?
I am unsure if LG is vulnerable to this, but I don't think we would be a target for this, I don't even know if we have Cloudfare because, CloudFlare obtained news about heartbleed a week before it really struck us all, and to top it all, they already fixed it. So if we were running a vulnerable version, no need to fear, we're good.
In any case, how will this bug affect us, users of the internet?
Heartbleed leaks information such as login usernames, passwords, etc. If you registered on a site with OpenSSL, and a vulnerable version of it, don't be surprised if your account, or even the entire website, has been compromised.
Talk of the NSA has it high waters. People have been stating that heartbleed has been used by the NSA, before it even came about. Using heartbleed to obtain all personal information, etc. Why? This seems like something the NSA would do. Do I believe the NSA did in-fact use it? I've no sure answer, as I don't know much about the subject, and while I'm not denying it, I will say no, they're not using it. There's no sure answer, that I've found, but the NSA has many, many, many ways of getting information without this bug. I highly doubt that out of their thousands of ways to grab you by the balls, they'd use heartbleed.
The information provided was from a few articles that I've read online. If you have questions, commments, etc., leave them below. If you want to know about heartbleed itself and how to do it, I do not know. Google that sort of thing.
- Aomine
