3 ms·
So this does mean that I need to change my passwords on every damn site on the list? Oh bollocks, those passwords were a work of art.
by badusername 13y ago
So this does mean that I need to change my passwords on every damn site on the list? Oh bollocks, those passwords were a work of art.
- spindritf 13y agoNo. This means you need to change keys for every ssl service you run. Passwords were known to be leaked earlier.
- sitkack 13y agoNew PRIVATE KEY, then new certs with that key.
- just2n 13y agoReally it means (as everyone assumed in the first place) that anything a web server might have in its heap needs to be totally thrown away. Private keys. Passwords. Credit card numbers. Security questions/answers. Sessions. Anything you'd send to a web server or receive from a web server is presumed compromised.
- Asparagirl 13y agoSeen on Twitter a few days ago: "Heartbleed is the Red Wedding of the Internet". Thought it hyperbolic at the time, but not any more...