Announcement

Collapse

Computer Lab Guidelines

Here in the computer lab, we talk about cool tech, the newest coolest gadgets, and tackle your toughest tech questions.

If you need to refresh yourself on the decorum, now would be a good time. Forum Rules: here
See more
See less

Heartbleed

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Heartbleed

    Public service announcement: If you own or run any Linux web servers, cloud or dedicated, that use https, then upgrade your version of openssl immediately, restart all open files, then re-issue your SSL certificates with new private keys.

    Process: Determine if your version of SSL is vulnerable:

    lsof -n | grep ssl | grep DEL

    If any running programs show up in the list, you're going to need to...

    yum clean metadata && yum update openssl

    or...

    apt-get update && apt-get install openssl

    Then run that original lsof command and restart EVERYTHING that shows up on the list. Then you can replace your certificates and key.

    For git lovers, there's this repo for testing vulnerable port 443s from the outside, if you also like python.

    End public service announcement, though this is what happens when you update your libraries to counter one theoretical BEAST attack and make yourself vulnerable to something much more serious.

  • #2
    When you visit a website for the first time since you learned about the Heartbleed bug, consider changing your password for that site, if any, as the first thing to do on site.
    The greater number of laws . . . , the more thieves . . . there will be. ---- Lao-Tzu

    [T]he truth I’m after and the truth never harmed anyone. What harms us is to persist in self-deceit and ignorance -— Marcus Aurelius, Meditations

    Comment


    • #3
      Kim Komando reports that several experts say that Heartbleed is beyond repair. We need to change to another SSL model. http://www.komando.com/blog/249665/h...-article_3-cta
      The greater number of laws . . . , the more thieves . . . there will be. ---- Lao-Tzu

      [T]he truth I’m after and the truth never harmed anyone. What harms us is to persist in self-deceit and ignorance -— Marcus Aurelius, Meditations

      Comment

      Related Threads

      Collapse

      Topics Statistics Last Post
      Started by Ronson, 03-20-2024, 07:20 PM
      2 responses
      28 views
      0 likes
      Last Post rogue06
      by rogue06
       
      Started by Christian3, 03-15-2024, 10:15 AM
      13 responses
      64 views
      0 likes
      Last Post QuantaFille  
      Working...
      X