Dismiss Notice

Ready to join TalkBass and start posting, get alerts, sell your gear, and more?  Register your free account in 30 seconds.

HeartBleed Virus.......

Discussion in 'Off Topic [BG]' started by ZenG, Apr 10, 2014.


  1. ZenG

    ZenG

    Dec 13, 2013
    Near the fridge
    Should I be concerned about it?
     
  2. Register_To_Disable

  3. 96tbird

    96tbird PLEASE STAND BY Supporting Member

    I added the chrome browser extension that gives a pop up every time it senses vulnerability on a site visited. It was popping all day today. :eek:
     
  4. placedesjardins

    placedesjardins

    May 7, 2012
    Computer virus? Did it come up in a anti-virus program catch?
     
  5. It's a backdoor into supposedly secure servers that store passwords and creditcard details. Hackers can waltz into say, TB, steal your login and email, and leave no trace of being there.

    Apparently the backdoor code was inserted by the NSA, cheers.
     
  6. bass_case

    bass_case Maintain low tones. Supporting Member

    Oct 23, 2013
    Miami, FL
    It's not a virus. It's a server side bug that has to be fixed on the server.
     
  7. DerHoggz

    DerHoggz I like cats :| Banned

    Feb 13, 2009
    Western Pennsylvania
    I haven't read that it was inserted by the NSA, but they certainly didn't mind exploiting it.
     
  8. xk49w

    xk49w

    Apr 13, 2008
    No. It is a buffer overrun type of vulnerability in a version or versions of OpenSSL that allows the attacker to obtain only 64 kbytes of data. The data could contain anything depending on what is there. It could be random data, old data, encrypted passwords, or even the server's certificate - at least as I understand Steve Gibson's explanation on Security Now.

    Always willing to learn,

    -- bradley.
     
  9. bluesdogblues

    bluesdogblues

    Nov 13, 2007
    oops sorry, I didn't found this thread when I was searching... so I post another thread about it...
    but now I do.. so I'll inform you here that our beloved talk bass.com categorized as "F" according to this site.. https://www.ssllabs.com/ssltest/
    be careful

    [​IMG]