Skip to main content

Heartbleed web security bug : how to secure yourself??

The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs).
The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users.
image source:http://www.digitaltrends.com/wp-content/uploads/2012/01/password-cracking-shutterstock.jpg

What leaks in practice?

We have tested some of our own services from attacker's perspective. We attacked ourselves from outside, without leaving a trace. Without using any privileged information or credentials we were able steal from ourselves the secret keys used for our X.509 certificates, user names and passwords, instant messages, emails and business critical documents and communication.

How to stop the leak?

As long as the vulnerable version of OpenSSL is in use it can be abused. Fixed OpenSSL has been released and now it has to be deployed. Operating system vendors and distribution, appliance vendors, independent software vendors have to adopt the fix and notify their users. Service providers and users have to install the fix as it becomes available for the operating systems, networked appliances and software they use.

source:Heartbleed.com
Labels:

Comments

Post a Comment

Popular posts from this blog

LG G3, the Legend: wait is about to get over!

Innovation is the buzzword these days. And when it comes to smartphones we are seeing newer, better, smarter phones coming up quite too often. And each one of them claiming to be the best and loaded with new features/technology/features! Sort of confusing, when you are planning to buy one. Isn’t it, eh? Adding to the list of these smart phones was the arrival of  LG G3 . Which in turn was quite a surprise and was welcomed dearly by the technology and smart phone enthusiasts on a global level. It changed the possibilities and perceptions of what a smart phone can do! Not that we’re saying it just for the sake for it. But the likes of CNET, BGR, The Verge and PhoneArena talked about the brilliant features and intuitive UI of the phone and praised it as one phone which is real smart and simple in the truest sense. So just a glimpse of what they had to say about the legendary LG G3.
Post a Comment
Read more

Apple Special Event - 10 September 2019

And Yes! with their well known September Special Event Apple is once again Live from Steve Jobs Theatre, Apple Park, Cupertino to bring the awesomeness into your lives with their smartly built devices. This time Tim wants to focus your eyes on the newly launched Apple Arcade service and this service is at jaw dropping price of $4.99 per month not only for you, but your full family. Let's see what's next in line surprises: Arcade:  Apple informed about this service in their previous event. Apple's newly launched gaming service with the amazing games of all time. Highlights of this service is that it's available from September 19 at very amazing price of $4.99 per month for the whole family. TV+: Apple took this service as well in last event. It's also available from the same, September 19 at the same price of $4.99 per month for the whole family.  iPad & iPadOS: iPad (source: apple.com) A new iPad to take the place in iPads family. iPa...
Post a Comment
Read more

Xiamoi introduced its new phone Mi3 in India

Xiaomi Inc. , Chinese brand introduced its new phone under the tagline Accelerate your life. Xiaomi claims this phone as its fastest phone ever. Phone featured with Qualcomm Snapdragon 800 8274AB Quad-Core 2.3GHz processor which is trying to prove the phone faster than ever. Using this processor the processing power increased 36 percent than its predecessor. 2 GB LPDDR3 RAM is the another proven side of the phone. LPDDR3 phone consumes 20 percent less power than its predecessor and 50 percent faster. 5 inch Full HD 1080p display with up to 441 ppi provide users a real view of the graphics. 4.35 volt litium-ion BM31 battery of 3050 mAh gives 500 hrs standby time and upto 21 hrs of internet usage on 3G network. NFC, earSmart noise reduction, barometer, upto 5GHz WI-FI support, etc. are another features makes this phone better. Specifications: Dimensions and weight Height 144 mm Width 73.6 mm Depth 8.1 mm Weight                   ...
Post a Comment
Read more