5 ms·
Would it make sense for everyone to change their passwords because of this?
by 3rd3 13y ago
Would it make sense for everyone to change their passwords because of this?
- carbocation 13y agoMany servers will still be vulnerable, so now you have 2 problems. Zawinski meme aside, perhaps it would make sense to do it on a server-by-server basis when the machines are verified patched. (Though, even then, how do you know they aren't passing information back to an Internet-exposed-but-unpatched database server?)
- regecks 13y agoIf you logged in (as in, typed your username and password) in to the site during the time the exploit has been disclosed and the site has been vulnerable, I would change your password. Otherwise, insist that the site owners invalidate all existing sessions.