Register Guidelines E-Books Search Today's Posts Mark Forums Read

Go Back   MobileRead Forums > E-Book General > News

Notices

Reply
 
Thread Tools Search this Thread
Old 04-09-2014, 09:06 AM   #1
speakingtohe
Wizard
speakingtohe ought to be getting tired of karma fortunes by now.speakingtohe ought to be getting tired of karma fortunes by now.speakingtohe ought to be getting tired of karma fortunes by now.speakingtohe ought to be getting tired of karma fortunes by now.speakingtohe ought to be getting tired of karma fortunes by now.speakingtohe ought to be getting tired of karma fortunes by now.speakingtohe ought to be getting tired of karma fortunes by now.speakingtohe ought to be getting tired of karma fortunes by now.speakingtohe ought to be getting tired of karma fortunes by now.speakingtohe ought to be getting tired of karma fortunes by now.speakingtohe ought to be getting tired of karma fortunes by now.
 
Posts: 4,586
Karma: 25107878
Join Date: Apr 2010
Device: sony PRS-T1 and T3, Kobo Mini and Aura HD, Tablet
Heartbleed bug

Revenue Canada has shut down their internet services de to the heartbleed bug.

http://www.cra-arc.gc.ca/menu-eng.html#msg

http://lifehacker.com/what-the-heart...you-1560801201

http://heartbleed.com/

More than a smidge scary

Helen
speakingtohe is offline   Reply With Quote
Old 04-09-2014, 12:37 PM   #2
jersysman
Wizard
jersysman ought to be getting tired of karma fortunes by now.jersysman ought to be getting tired of karma fortunes by now.jersysman ought to be getting tired of karma fortunes by now.jersysman ought to be getting tired of karma fortunes by now.jersysman ought to be getting tired of karma fortunes by now.jersysman ought to be getting tired of karma fortunes by now.jersysman ought to be getting tired of karma fortunes by now.jersysman ought to be getting tired of karma fortunes by now.jersysman ought to be getting tired of karma fortunes by now.jersysman ought to be getting tired of karma fortunes by now.jersysman ought to be getting tired of karma fortunes by now.
 
jersysman's Avatar
 
Posts: 1,661
Karma: 3682230
Join Date: Mar 2011
Location: Pennsylvania
Device: T1 Red, Kindle Fire, Kindle PW, PW2, Nook HD+, Kobo Mini, Aura HD
I'll say. It's always something!
jersysman is offline   Reply With Quote
Old 04-09-2014, 12:47 PM   #3
Mike L
Wizard
Mike L ought to be getting tired of karma fortunes by now.Mike L ought to be getting tired of karma fortunes by now.Mike L ought to be getting tired of karma fortunes by now.Mike L ought to be getting tired of karma fortunes by now.Mike L ought to be getting tired of karma fortunes by now.Mike L ought to be getting tired of karma fortunes by now.Mike L ought to be getting tired of karma fortunes by now.Mike L ought to be getting tired of karma fortunes by now.Mike L ought to be getting tired of karma fortunes by now.Mike L ought to be getting tired of karma fortunes by now.Mike L ought to be getting tired of karma fortunes by now.
 
Mike L's Avatar
 
Posts: 1,385
Karma: 3793261
Join Date: Apr 2009
Location: Edinburgh, Scotland
Device: Kindle 3, Nexus 7
A couple of sites that I visit regularly seem to be off the air at present. I don't know it it's directly because of Heartbleed, but it is quite possible.

Mike
Mike L is offline   Reply With Quote
Old 04-09-2014, 04:43 PM   #4
Hamlet53
Babi Yar
Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.
 
Hamlet53's Avatar
 
Posts: 3,755
Karma: 45944891
Join Date: Mar 2009
Device: Kindle PW, Kindle Fire HDX 8.9"
I found that a lot of web sites that I normally visit daily were unreachable starting late afternoon; Pandora, Charles Schwab, . . . All were back online this morning though.
Hamlet53 is offline   Reply With Quote
Old 04-10-2014, 12:16 AM   #5
49Kat
I'm just a bird, see?
49Kat ought to be getting tired of karma fortunes by now.49Kat ought to be getting tired of karma fortunes by now.49Kat ought to be getting tired of karma fortunes by now.49Kat ought to be getting tired of karma fortunes by now.49Kat ought to be getting tired of karma fortunes by now.49Kat ought to be getting tired of karma fortunes by now.49Kat ought to be getting tired of karma fortunes by now.49Kat ought to be getting tired of karma fortunes by now.49Kat ought to be getting tired of karma fortunes by now.49Kat ought to be getting tired of karma fortunes by now.49Kat ought to be getting tired of karma fortunes by now.
 
49Kat's Avatar
 
Posts: 425
Karma: 1221250
Join Date: Oct 2011
Location: SK,Canada/NV, USA
Device: Sony PRS650 (1st reader); Kobo Vox (retired); iPad2;iPad Mini;iPhone5
A member of the Malwarebytes message board posted a link regarding sites that had been tested for vulnerability. The results are here:

https://github.com/musalbas/heartble...er/top1000.txt

Interesting list. So far, I don't see anything that concerns me re sites I log in to. The list is not comprehensive, however, and not all the sites I deal with re finances are on that list either.

Just for funzies, I searched for adobe, and the list shows it is not vulnerable to the bug.

Yahoo...well, it is, from the look of things.
49Kat is offline   Reply With Quote
Old 04-10-2014, 06:16 AM   #6
MickiTee
Zealot
MickiTee ought to be getting tired of karma fortunes by now.MickiTee ought to be getting tired of karma fortunes by now.MickiTee ought to be getting tired of karma fortunes by now.MickiTee ought to be getting tired of karma fortunes by now.MickiTee ought to be getting tired of karma fortunes by now.MickiTee ought to be getting tired of karma fortunes by now.MickiTee ought to be getting tired of karma fortunes by now.MickiTee ought to be getting tired of karma fortunes by now.MickiTee ought to be getting tired of karma fortunes by now.MickiTee ought to be getting tired of karma fortunes by now.MickiTee ought to be getting tired of karma fortunes by now.
 
MickiTee's Avatar
 
Posts: 106
Karma: 532788
Join Date: Jun 2012
Location: London, UK
Device: Sony PRS-505 & T1
This from CNET this morning about protecting yourself http://www.cnet.com/news/how-to-prot...tag=CAD1acfa04
MickiTee is offline   Reply With Quote
Old 04-10-2014, 06:32 AM   #7
Prestidigitweeze
Fledgling Demagogue
Prestidigitweeze ought to be getting tired of karma fortunes by now.Prestidigitweeze ought to be getting tired of karma fortunes by now.Prestidigitweeze ought to be getting tired of karma fortunes by now.Prestidigitweeze ought to be getting tired of karma fortunes by now.Prestidigitweeze ought to be getting tired of karma fortunes by now.Prestidigitweeze ought to be getting tired of karma fortunes by now.Prestidigitweeze ought to be getting tired of karma fortunes by now.Prestidigitweeze ought to be getting tired of karma fortunes by now.Prestidigitweeze ought to be getting tired of karma fortunes by now.Prestidigitweeze ought to be getting tired of karma fortunes by now.Prestidigitweeze ought to be getting tired of karma fortunes by now.
 
Prestidigitweeze's Avatar
 
Posts: 2,203
Karma: 24642771
Join Date: Feb 2011
Location: White Plains
Device: Aura HD; Nexus 7; PRS-350, 950; Kindle K; OnePlus One; Galaxy S4; MBP.
Here's a site for checking present and past site vulnerability:

https://lastpass.com/heartbleed/
Prestidigitweeze is offline   Reply With Quote
Old 04-10-2014, 12:01 PM   #8
jswinden
Astrophotographer
jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.
 
jswinden's Avatar
 
Posts: 5,217
Karma: 5642618
Join Date: Sep 2006
Location: USA
Device: iPad Mini 2, iPhone 5, Nexus 7.2
Quote:
Originally Posted by 49Kat View Post
A member of the Malwarebytes message board posted a link regarding sites that had been tested for vulnerability. The results are here:

https://github.com/musalbas/heartble...er/top1000.txt

Interesting list. So far, I don't see anything that concerns me re sites I log in to. The list is not comprehensive, however, and not all the sites I deal with re finances are on that list either.

Just for funzies, I searched for adobe, and the list shows it is not vulnerable to the bug.

Yahoo...well, it is, from the look of things.
The list you linked to might show some fixed sites. For example, Google, Amazon, and Facebook were all reported to be vulnerable yet this list shows them not to be. If they were vulnerable before a fix was made, people who used them are still at risk. So take that list with a grain of salt.
jswinden is offline   Reply With Quote
Old 04-10-2014, 01:00 PM   #9
eschwartz
Irrational Optimist
eschwartz ought to be getting tired of karma fortunes by now.eschwartz ought to be getting tired of karma fortunes by now.eschwartz ought to be getting tired of karma fortunes by now.eschwartz ought to be getting tired of karma fortunes by now.eschwartz ought to be getting tired of karma fortunes by now.eschwartz ought to be getting tired of karma fortunes by now.eschwartz ought to be getting tired of karma fortunes by now.eschwartz ought to be getting tired of karma fortunes by now.eschwartz ought to be getting tired of karma fortunes by now.eschwartz ought to be getting tired of karma fortunes by now.eschwartz ought to be getting tired of karma fortunes by now.
 
Posts: 4,547
Karma: 6343028
Join Date: Nov 2012
Location: The Beaten Path, USA, Roundworld, This Side of Infinity
Device: Kindle Touch (Wifi only)
Quote:
Originally Posted by jswinden View Post
The list you linked to might show some fixed sites. For example, Google, Amazon, and Facebook were all reported to be vulnerable yet this list shows them not to be. If they were vulnerable before a fix was made, people who used them are still at risk. So take that list with a grain of salt.
I haven't checked yet, but apparently the LastPass site gives you site history re:heartbleed vulnerability?
eschwartz is online now   Reply With Quote
Old 04-10-2014, 01:05 PM   #10
jswinden
Astrophotographer
jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.jswinden ought to be getting tired of karma fortunes by now.
 
jswinden's Avatar
 
Posts: 5,217
Karma: 5642618
Join Date: Sep 2006
Location: USA
Device: iPad Mini 2, iPhone 5, Nexus 7.2
Quote:
Originally Posted by eschwartz View Post
I haven't checked yet, but apparently the LastPass site gives you site history re:heartbleed vulnerability?
It does, and that is how I knew Amazon, Facebook, and Google had all been vulnerable in the past. I wouldn't get a false sense of relief about sites that are now safe if they were once vulnerable, assuming I used any of those sites and exchanged data with them. I have definitely used and have accounts with Amazon, Facebook, Google, and others and once I'm certain they have fixed the issues then I will change passwords. No need to change passwords until they are definitely fixed as that might keep you at risk.
jswinden is offline   Reply With Quote
Old 04-10-2014, 03:08 PM   #11
DiapDealer
Grand Sorcerer
DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.
 
DiapDealer's Avatar
 
Posts: 8,767
Karma: 39536849
Join Date: Jan 2010
Device: Nexus 7, Kindle Fire HD
Quote:
Originally Posted by jswinden View Post
No need to change passwords until they are definitely fixed as that might keep you at risk.
'zactly.

Everybody's gotta do what helps them sleep better at night. I get that. But here's the three scenarios I currently see regarding Heartbleed:
  1. They already got my personal info and I'm already screwed--even if I change my password now.
  2. I changed my password in time, but the site hasn't been patched against Heartbleed and my personal info is still vulnerable.
  3. The site has already closed the Heartbleed hole, and I'm changing my password because it's just good practice.

Other than making sure my passwords aren't silly-simple, I've come to the realization that I really don't have a single bit of control over my own online "security."

Even if I had absolutely no online accounts, the companies, and financial institutions I did business with would still store my personal info in hackable databases. *shrug*

Last edited by DiapDealer; 04-10-2014 at 03:12 PM.
DiapDealer is offline   Reply With Quote
Old 04-10-2014, 03:54 PM   #12
Purple Lady
Wizard
Purple Lady ought to be getting tired of karma fortunes by now.Purple Lady ought to be getting tired of karma fortunes by now.Purple Lady ought to be getting tired of karma fortunes by now.Purple Lady ought to be getting tired of karma fortunes by now.Purple Lady ought to be getting tired of karma fortunes by now.Purple Lady ought to be getting tired of karma fortunes by now.Purple Lady ought to be getting tired of karma fortunes by now.Purple Lady ought to be getting tired of karma fortunes by now.Purple Lady ought to be getting tired of karma fortunes by now.Purple Lady ought to be getting tired of karma fortunes by now.Purple Lady ought to be getting tired of karma fortunes by now.
 
Purple Lady's Avatar
 
Posts: 1,835
Karma: 2626942
Join Date: Feb 2010
Location: Pennsylvania
Device: Nexus 7 LTE, Nexus 7 3g, Sony PRS-950, K3 3G, Nexus 5, Onyx Boox T68
Quote:
Originally Posted by jswinden View Post
It does, and that is how I knew Amazon, Facebook, and Google had all been vulnerable in the past. I wouldn't get a false sense of relief about sites that are now safe if they were once vulnerable, assuming I used any of those sites and exchanged data with them. I have definitely used and have accounts with Amazon, Facebook, Google, and others and once I'm certain they have fixed the issues then I will change passwords. No need to change passwords until they are definitely fixed as that might keep you at risk.
I thought for Amazon it wasn't their main website, but their other stuff like Amazon Web Services. So as a regular client that just buys a lot of stuff you're ok.
Purple Lady is offline   Reply With Quote
Old 04-10-2014, 04:02 PM   #13
daffy4u
I'm Super Kindle-icious
daffy4u ought to be getting tired of karma fortunes by now.daffy4u ought to be getting tired of karma fortunes by now.daffy4u ought to be getting tired of karma fortunes by now.daffy4u ought to be getting tired of karma fortunes by now.daffy4u ought to be getting tired of karma fortunes by now.daffy4u ought to be getting tired of karma fortunes by now.daffy4u ought to be getting tired of karma fortunes by now.daffy4u ought to be getting tired of karma fortunes by now.daffy4u ought to be getting tired of karma fortunes by now.daffy4u ought to be getting tired of karma fortunes by now.daffy4u ought to be getting tired of karma fortunes by now.
 
daffy4u's Avatar
 
Posts: 6,724
Karma: 2429021
Join Date: Apr 2008
Location: Long Drive, Calinadia Candafornia
Device: K1, KTSO, KFHD7, KPW1
Mashable has a chart that's a little easier to read.

http://mashable.com/2014/04/09/heart...ites-affected/

I use LastPass and have been changing passwords as advised (sometimes you have to wait for sites to update their certificates).
daffy4u is offline   Reply With Quote
Old 04-10-2014, 04:13 PM   #14
Hamlet53
Babi Yar
Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.Hamlet53 ought to be getting tired of karma fortunes by now.
 
Hamlet53's Avatar
 
Posts: 3,755
Karma: 45944891
Join Date: Mar 2009
Device: Kindle PW, Kindle Fire HDX 8.9"
Quote:
Originally Posted by DiapDealer View Post
'zactly.

Everybody's gotta do what helps them sleep better at night. I get that. But here's the three scenarios I currently see regarding Heartbleed:
  1. They already got my personal info and I'm already screwed--even if I change my password now.
  2. I changed my password in time, but the site hasn't been patched against Heartbleed and my personal info is still vulnerable.
  3. The site has already closed the Heartbleed hole, and I'm changing my password because it's just good practice.

Other than making sure my passwords aren't silly-simple, I've come to the realization that I really don't have a single bit of control over my own online "security."

Even if I had absolutely no online accounts, the companies, and financial institutions I did business with would still store my personal info in hackable databases. *shrug*
Yes that's about it. The only thing that I have done so far is to avoid logging onto yahoo until I'm sure that it's in the clear.

Quote:
Originally Posted by daffy4u View Post
Mashable has a chart that's a little easier to read.

http://mashable.com/2014/04/09/heart...ites-affected/

I use LastPass and have been changing passwords as advised (sometimes you have to wait for sites to update their certificates).
I find it funny that Target is on that list with a no [not impacted].
Hamlet53 is offline   Reply With Quote
Old 04-10-2014, 04:23 PM   #15
QuantumIguana
Philosopher
QuantumIguana ought to be getting tired of karma fortunes by now.QuantumIguana ought to be getting tired of karma fortunes by now.QuantumIguana ought to be getting tired of karma fortunes by now.QuantumIguana ought to be getting tired of karma fortunes by now.QuantumIguana ought to be getting tired of karma fortunes by now.QuantumIguana ought to be getting tired of karma fortunes by now.QuantumIguana ought to be getting tired of karma fortunes by now.QuantumIguana ought to be getting tired of karma fortunes by now.QuantumIguana ought to be getting tired of karma fortunes by now.QuantumIguana ought to be getting tired of karma fortunes by now.QuantumIguana ought to be getting tired of karma fortunes by now.
 
QuantumIguana's Avatar
 
Posts: 1,844
Karma: 17022226
Join Date: Jan 2012
Device: Kindle Paperwhite 2 gen, Kindle Fire 1st Gen, Kindle Touch
Passwords are Stone Age technology. The sooner we get away from them, the better.
QuantumIguana is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Glo Is this another bug ? stethorn Kobo Reader 14 08-10-2013 11:49 AM
0.6.1 bug mrmikel Sigil 8 12-04-2012 08:31 AM
DR800 Help, I've got a bug!! A bug on my screen!! Franky iRex 4 06-21-2011 11:45 AM
Embedded font bug or CSS bug in ADE JSWolf ePub 10 06-11-2011 02:34 PM
PRS-505 bug or eBookLib bug? porkupan Sony Reader 3 10-07-2007 10:44 PM


All times are GMT -4. The time now is 09:41 PM.


MobileRead.com is a privately owned, operated and funded community.