Heartbleed

User avatar
Claude
cheese lizard
Posts: 6241
Joined: 16 Jan 2010, 00:14
Location: Sydney Australia

Heartbleed

Post by Claude »

Seeing it is making news around the world by now, I post a new topic regarding the way to test if the secure site you're visiting is safe.

http://filippo.io/Heartbleed/
Cheers, Claude.

User avatar
viking33
PlatinumLounger
Posts: 5685
Joined: 24 Jan 2010, 19:16
Location: Cape Cod, Massachusetts,USA

Re: Heartbleed

Post by viking33 »

Claude wrote:Seeing it is making news around the world by now, I post a new topic regarding the way to test if the site you're visiting.

http://filippo.io/Heartbleed/
So I tried eileenslounge.com and got:

Uh-oh, something went wrong: dial tcp 69.5.14.179:443: connection refused
Check what it means at the FAQ.
It might mean that the server is safe, we just can't be 100% sure!

Checked the FAQs and read this is usually a good sign! :scratch:
BOB
:massachusetts: :usa:
______________________________________

If I agreed with you we'd both be wrong.

User avatar
HansV
Administrator
Posts: 78474
Joined: 16 Jan 2010, 00:14
Status: Microsoft MVP
Location: Wageningen, The Netherlands

Re: Heartbleed

Post by HansV »

Eileen's Lounge doesn't use Open SSL, so it doesn't apply to us.
Best wishes,
Hans

User avatar
viking33
PlatinumLounger
Posts: 5685
Joined: 24 Jan 2010, 19:16
Location: Cape Cod, Massachusetts,USA

Re: Heartbleed

Post by viking33 »

HansV wrote:Eileen's Lounge doesn't use Open SSL, so it doesn't apply to us.
Always a good reason. Thanks Hans!
BOB
:massachusetts: :usa:
______________________________________

If I agreed with you we'd both be wrong.

User avatar
John Gray
PlatinumLounger
Posts: 5408
Joined: 24 Jan 2010, 08:33
Location: A cathedral city in England

Re: Heartbleed

Post by John Gray »

A couple of banks I use came up with
dial tcp http://www.xxx.yyy.zzz:443" onclick="window.open(this.href);return false;: connection refused
(IP address obfuscated!)
John Gray

"(or one of the team)" - how your appointment letter indicates you won't be seeing the Consultant...

User avatar
Claude
cheese lizard
Posts: 6241
Joined: 16 Jan 2010, 00:14
Location: Sydney Australia

Re: Heartbleed

Post by Claude »

what bank would be stupid enough to use http instead of https ? :evilgrin:
Cheers, Claude.

User avatar
Rudi
gamma jay
Posts: 25455
Joined: 17 Mar 2010, 17:33
Location: Cape Town

Re: Heartbleed

Post by Rudi »

Another info article explaining this bug and where you stand...
http://techtalk.pcpitstop.com/2014/04/0 ... eartbleed=
Regards,
Rudi

If your absence does not affect them, your presence didn't matter.

User avatar
John Gray
PlatinumLounger
Posts: 5408
Joined: 24 Jan 2010, 08:33
Location: A cathedral city in England

Re: Heartbleed

Post by John Gray »

Claude wrote:what bank would be stupid enough to use http instead of https ? :evilgrin:
Blame the utility, not the bank - I simply did a cut-and-paste!
John Gray

"(or one of the team)" - how your appointment letter indicates you won't be seeing the Consultant...

User avatar
Leif
Administrator
Posts: 7209
Joined: 15 Jan 2010, 22:52
Location: Middle of England

Re: Heartbleed

Post by Leif »

In case you didn't know, this is How the Heartbleed Bug works
Leif

User avatar
StuartR
Administrator
Posts: 12604
Joined: 16 Jan 2010, 15:49
Location: London, Europe

Re: Heartbleed

Post by StuartR »

What a beautifully simple explanation
StuartR


User avatar
viking33
PlatinumLounger
Posts: 5685
Joined: 24 Jan 2010, 19:16
Location: Cape Cod, Massachusetts,USA

Re: Heartbleed

Post by viking33 »

StuartR wrote:What a beautifully simple explanation
Also love the simple circuit diagram. :rofl:
http://xkcd.com/730/" onclick="window.open(this.href);return false;
BOB
:massachusetts: :usa:
______________________________________

If I agreed with you we'd both be wrong.

User avatar
Rudi
gamma jay
Posts: 25455
Joined: 17 Mar 2010, 17:33
Location: Cape Town

Re: Heartbleed

Post by Rudi »

Anne of course, one for and...http://xkcd.com/729/
Regards,
Rudi

If your absence does not affect them, your presence didn't matter.

User avatar
ChrisGreaves
PlutoniumLounger
Posts: 15615
Joined: 24 Jan 2010, 23:23
Location: brings.slot.perky

Re: Heartbleed

Post by ChrisGreaves »

Claude wrote:Seeing it is making news around the world by now, I post a new topic regarding the way to test if the secure site you're visiting is safe.
Some light-hearted (sic) commentary http://www.techradar.com/news/internet/heart-attack-how-the-heartbleed-bug-confused-the-web-world-1241873?src=rss&attr=all#null
There's nothing heavier than an empty water bottle