News / Science & Technology

'Heartbleed' Flaw Endangers Encrypted Data Online

FILE - A photo shows network cables connected to a server at the CeBIT Computer and IT Far in Hanover, northern Germany.
FILE - A photo shows network cables connected to a server at the CeBIT Computer and IT Far in Hanover, northern Germany.
A glitch in software meant to encrypt and protect online transactions has potentially exposed millions of passwords, credit card numbers and other sensitive bits of information to potential theft by computer hackers.
 
Security researchers at Google and Internet security firm Codenomicon revealed the breakdown, known as "Heartbleed", on Tuesday. The glitch was in a vulnerable version of software known as OpenSSL.  
 
OpenSSL software is meant to protect online accounts for emails, instant messaging and a wide range of electronic commerce.
 
Heartbleed is of particular concern because it went undetected for more than two years, making it difficult for people to know if they’ve been compromised. Security researchers are advising people to consider changing their online passwords.
 
“The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software,” according to the website Heartbleed.com, which was set up by Codenomicon. “This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content.”
 
Codenomicon said it had tested its own services “from an attacker’s perspective" and successfully stolen “usernames and passwords, instant messages, emails and business critical documents” all “without leaving a trace.”
 
The discovery of the bug prompted the U.S. Department of Homeland Security to issue a warning computer users and systems administrators to see whether they’re using OpenSSL.
 
Codenomicon is advising service providers and users to “install the fix as it becomes available for the operating systems, networked appliances and software they use.”

Experts say Heartbleed is serious and of concern to all Internet users, but that before changing passwords, check to see that the bug has been patched.

"Many are calling for an immediate change to passwords - a call to action I fully endorse with one caveat," said Christopher Burgess, CEO of Prevendra, Inc., an Internet security firm. "If the entity with whom you are about to change your password has not updated their SSL, you are changing your password into an insecure environment.  I advocate checking for the update from your vendor - once they confirm, then change the password to a strong password."

Burgess added that it's important to remember that the problem isn't on your device or machine, but rather on the servers supporting websites we visit each day.

You can check if a website has updated its servers by visiting this Heartbleed testing site.

You May Like

Cambodia Seeks Official UN Maps for Vietnam Border

Notice of request comes as 2 countries open border talks Tuesday after a clash last month More

From South Africa to Vietnam, Cyclists Deliver Message Against Rhino Horns

Appalled by poaching they saw firsthand, sisters embark on tour to raise awareness in countries where rhino horn products are in demand More

Uber Wants Johannesburg Police Protection

Request follows recent protests outside ride-hailing service's Johannesburg office More

This forum has been closed.
Comments
     
There are no comments in this forum. Be first and add one

Featured Videos

Your JavaScript is turned off or you have an old version of Adobe's Flash Player. Get the latest Flash player.
New Implant Could Help Restore Movement to Paralyzed Limbsi
|| 0:00:00
...    
🔇
X
Maia Pujara
July 07, 2015 10:01 PM
A half-million people suffer spinal cord injuries each year because of car accidents, serious falls and diseases, according to the World Health Organization. Researchers are now working on a soft but strong spinal cord implant that could one day restore movement in paralyzed individuals. VOA’s Maia Pujara reports.
Video

Video New Implant Could Help Restore Movement to Paralyzed Limbs

A half-million people suffer spinal cord injuries each year because of car accidents, serious falls and diseases, according to the World Health Organization. Researchers are now working on a soft but strong spinal cord implant that could one day restore movement in paralyzed individuals. VOA’s Maia Pujara reports.
Video

Video Getting it Done Beyond a Nuclear Deal

If a nuclear deal is reached between Iran and world powers in Vienna, it will be a highly technical road map to be used to monitor nuclear activity in Iran for years to come to ensure Tehran does not make nuclear weapons. Equally as complicated will be dismantling international sanctions that were originally intended to be ironclad. VOA’s Heather Murdock talks to experts about the key challenges any deal will present.
Video

Video Rice Farmers Frustrated As Drought Grips Thailand

A severe drought in Thailand is limiting the growing season of the country’s important rice crop. Farmers are blaming the government for not doing more to protect a key export. Steve Sandford reports from Chiang Mai, Thailand.
Video

Video Making Music, Fleeing Bombs: New Film on Sudan’s Internal Refugees

In 2012, Sudanese filmmaker Hajooj Kuka went to make a documentary among civil war refugees in Sudan’s Blue Nile and Nuba Mountains region. What he found surprised him: music was helping to save people from bombing raids by their own government. VOA’s Carolyn Weaver has more.
Video

Video 'From This Day Forward' Reveals Difficult Journey of Transgender Parent

In her documentary, "From This Day Forward", filmmaker Sharon Shattuck reveals the personal journey of her transgender father, as he told his family that he always felt he was a woman inside and decided to live as one. VOA’s Penelope Poulou has more.
Video

Video Floodwaters Threaten Iconic American Home

The Farnsworth House in the Midwest State of Illinois is one of the most iconic homes in America. Thousands of tourists visit the site every year. Its location near a river inspired the design of the house, but, as VOA’s Kane Farabaugh reports, that very location is now threatening the existence of this National Historic Landmark.
Video

Video Olympics Construction Scars Sacred Korean Mountain

Environmentalists in South Korea are protesting a Winter Olympics construction project to build a ski slope through a 500-year-old protected forest. Brian Padden reports that although there is strong national support for hosting the 2018 Pyeongchang Winter Olympics, there are growing public concerns over the costs and possible ecological damage at the revered mountain.
Video

Video Xenophobia Victims in South Africa Flee Violence, Then Return

Many Malawians fled South Africa early this year after xenophobic attacks on African immigrants. But many quickly found life was no better at home and have returned to South Africa – often illegally and without jobs, and facing the tough task of having to start over. Lameck Masina and Anita Powell file from Johannesburg.
Video

Video Family of American Marine Calls for Release From Iranian Prison

As the crowd of journalists covering the Iran talks swells, so too do the opportunities for media coverage.  Hoping to catch the attention of high-level diplomats, the family of American-Iranian marine Amir Hekmati is in Vienna, pleading for his release from an Iranian prison after nearly 4 years.  VOA’s Heather Murdock reports from Vienna.
Video

Video UK Holds Terror Drill as MPs Mull Tunisia Response

After pledging a tough response to last Friday’s terror attack in Tunisia, which came just days before the 10th anniversary of the bomb attacks on London’s transport network, British security services are shifting their focus to overseas counter-terror operations. VOA's Henry Ridgwell has more.
Video

Video Hate Groups Spread Influence Via Internet

Hate groups of various kinds are using the Internet for propaganda and recruitment, and a Jewish human rights organization that monitors these groups, the Simon Wiesenthal Center, says their influence is growing. The messages are different, but the calls to hatred or violence are similar. VOA's Mike O’Sullivan reports.
Video

Video Blind Somali Journalist Defies Odds in Mogadishu

Despite improving security in the last few years, Somalia remains one of the most dangerous countries to be a journalist – even more so for someone who cannot see. Abdulaziz Billow has the story of journalist Abdifatah Hassan Kalgacal, who has been reporting from the Somali capital for the last decade despite being blind.

VOA Blogs