1. Welcome to TalkBass, the Premier Bass Player Community and Information Source. Register a 100% Free Account to post and unlock tons of features.

HeartBleed Virus.......

Discussion in 'Off Topic [BG]' started by ZenG, Apr 10, 2014.

  1. ZenG


    Dec 13, 2013
    Should I be concerned about it?
  2. SunnBass

    SunnBass All these blankets saved my life. Supporting Member

    Aug 31, 2010
    Columbia, Mo
  3. TalkBass Friendly Advertisement

    to hide this ad and more.
  4. 96tbird

    96tbird PLEASE STAND BY Supporting Member

    Dec 13, 2010
    Manitoba, Canada
    I added the chrome browser extension that gives a pop up every time it senses vulnerability on a site visited. It was popping all day today. :eek:
  5. placedesjardins


    May 7, 2012
    Computer virus? Did it come up in a anti-virus program catch?
  6. It's a backdoor into supposedly secure servers that store passwords and creditcard details. Hackers can waltz into say, TB, steal your login and email, and leave no trace of being there.

    Apparently the backdoor code was inserted by the NSA, cheers.
  7. bass_case

    bass_case Maintain low tones. Supporting Member

    Oct 23, 2013
    Miami, FL
    It's not a virus. It's a server side bug that has to be fixed on the server.
  8. DerHoggz

    DerHoggz I like cats :| Banned

    Feb 13, 2009
    Western Pennsylvania
    I haven't read that it was inserted by the NSA, but they certainly didn't mind exploiting it.
  9. Codger

    Codger Supporting Member

    Apr 13, 2008
    No. It is a buffer overrun type of vulnerability in a version or versions of OpenSSL that allows the attacker to obtain only 64 kbytes of data. The data could contain anything depending on what is there. It could be random data, old data, encrypted passwords, or even the server's certificate - at least as I understand Steve Gibson's explanation on Security Now.

    Always willing to learn,

    -- bradley.
  10. bluesdogblues


    Nov 13, 2007
    oops sorry, I didn't found this thread when I was searching... so I post another thread about it...
    but now I do.. so I'll inform you here that our beloved talk bass.com categorized as "F" according to this site.. https://www.ssllabs.com/ssltest/
    be careful

  11. bmc


    Nov 15, 2003

Share This Page