Welcome to TalkBass, the Premier Bass Player Community and Information Source. Register a 100% Free Account to post and unlock tons of features.
Discussion in 'Off Topic [BG]' started by ZenG, Apr 10, 2014.
Should I be concerned about it?
Log in or Sign up to hide this ad and more.
I added the chrome browser extension that gives a pop up every time it senses vulnerability on a site visited. It was popping all day today.
Computer virus? Did it come up in a anti-virus program catch?
It's a backdoor into supposedly secure servers that store passwords and creditcard details. Hackers can waltz into say, TB, steal your login and email, and leave no trace of being there.
Apparently the backdoor code was inserted by the NSA, cheers.
It's not a virus. It's a server side bug that has to be fixed on the server.
I haven't read that it was inserted by the NSA, but they certainly didn't mind exploiting it.
No. It is a buffer overrun type of vulnerability in a version or versions of OpenSSL that allows the attacker to obtain only 64 kbytes of data. The data could contain anything depending on what is there. It could be random data, old data, encrypted passwords, or even the server's certificate - at least as I understand Steve Gibson's explanation on Security Now.
Always willing to learn,
oops sorry, I didn't found this thread when I was searching... so I post another thread about it...
but now I do.. so I'll inform you here that our beloved talk bass.com categorized as "F" according to this site.. https://www.ssllabs.com/ssltest/
This is interesting
Separate names with a comma.