Thread: Heartbleed bug
View Single Post
Old 04-11-2014, 10:42 AM   #28
jswinden
Nameless Being
 
Quote:
Originally Posted by DiapDealer View Post
'zactly.

Everybody's gotta do what helps them sleep better at night. I get that. But here's the three scenarios I currently see regarding Heartbleed:
  1. They already got my personal info and I'm already screwed--even if I change my password now.
  2. I changed my password in time, but the site hasn't been patched against Heartbleed and my personal info is still vulnerable.
  3. The site has already closed the Heartbleed hole, and I'm changing my password because it's just good practice.

Other than making sure my passwords aren't silly-simple, I've come to the realization that I really don't have a single bit of control over my own online "security."

Even if I had absolutely no online accounts, the companies, and financial institutions I did business with would still store my personal info in hackable databases. *shrug*
Yep, not a question of if your online business will be vulnerable, it is a question of when. Sloppy commerce websites seem to be more prevalent than well secure ones.

Quote:
Originally Posted by daffy4u View Post
Mashable has a chart that's a little easier to read.

http://mashable.com/2014/04/09/heart...ites-affected/

I use LastPass and have been changing passwords as advised (sometimes you have to wait for sites to update their certificates).
The banks seem to be very secure. The commerce sites need to hire the same security firms that the banks use!
  Reply With Quote