Singletrack vulnera...
 

MegaSack DRAW - This year's winner is user - rgwb
We will be in touch

[Closed] Singletrack vulnerable to heartbleed

87 Posts
30 Users
0 Reactions
546 Views
Posts: 30656
Free Member
 

That's what happens when you give something serious such an Emo name.


 
Posted : 10/04/2014 9:46 pm
Posts: 251
Full Member
 

The coder has 'fessed up;

[url= http://big.assets.huffingtonpost.com/672443316256430888.gi f" target="_blank">http://big.assets.huffingtonpost.com/672443316256430888.gi f"/> [/url]

It's not the fault of the open source process per se, it's just that there's too few people doing code reviews because no one will pay them to. Probably.


 
Posted : 11/04/2014 7:39 am
Posts: 33577
Full Member
 

Just to add to this, I've just read this from Twitter, via Flipboard:
[b]More People Were Paid To Exploit Heartbleed For The NSA Than To Fix It[/b]
http://falkvinge.net/2014/04/11/more-people-were-paid-to-exploit-heartbleed-for-the-nsa-than-to-fix-it/
Does come as no surprise, really.


 
Posted : 12/04/2014 7:24 pm
Posts: 11402
Free Member
 

nice explanation

[img] [/img]

what complete cock up


 
Posted : 13/04/2014 6:41 pm
Posts: 30656
Free Member
 

Out of all the websites I am registered with, only iFTTT has emailed me about the issue. Imgur, which was shown to be susceptible, sent bollocks all.

*harumphs*


 
Posted : 13/04/2014 6:53 pm
Posts: 0
Free Member
 

The first photo on the link rj2dj posted has some impressive cabling! God I'm sad...


 
Posted : 13/04/2014 7:49 pm
Posts: 30656
Free Member
 

The first photo on the link rj2dj posted has some impressive cabling! God I'm sad...

Fill your boots...

http://reddpics.com/r/cableporn


 
Posted : 13/04/2014 11:08 pm
Posts: 894
Free Member
Topic starter
 

I am getting so frustrated with the vague and non-committal responses to queries on this subject.
To date I've only had 3-4 notifications that a site has been patched and is now safe or that they were not affected. Other than that I've been forced to email the company concerned (I have a password database of over 100 unique logins) to ask for clarification as to whether their systems are safe to start using again.
In most cases I get responses that are vague to the point of being useless in clarifying the situation..
For example, reply from Sony regarding their Entertainment Network (formerly playstation store)...

I can confirm that we have no information regards it affected our website, and we would like to re-assure you that your account is secured

Given that I asked them specifically the status of their SSL certificate that response tells me nothing.!! Grrrrr...
Still haven't been able to confirm that any of the online bike stores are safe yet either... there seems to be a great deal of 'heads in the sand' about this and it's not bloomin' good enough.. [/rant]

and breath.... 🙂


 
Posted : 15/04/2014 3:45 pm
Page 2 / 2