News / Science & Technology

'Heartbleed' Flaw Endangers Encrypted Data Online

FILE - A photo shows network cables connected to a server at the CeBIT Computer and IT Far in Hanover, northern Germany.
FILE - A photo shows network cables connected to a server at the CeBIT Computer and IT Far in Hanover, northern Germany.
A glitch in software meant to encrypt and protect online transactions has potentially exposed millions of passwords, credit card numbers and other sensitive bits of information to potential theft by computer hackers.
 
Security researchers at Google and Internet security firm Codenomicon revealed the breakdown, known as "Heartbleed", on Tuesday. The glitch was in a vulnerable version of software known as OpenSSL.  
 
OpenSSL software is meant to protect online accounts for emails, instant messaging and a wide range of electronic commerce.
 
Heartbleed is of particular concern because it went undetected for more than two years, making it difficult for people to know if they’ve been compromised. Security researchers are advising people to consider changing their online passwords.
 
“The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software,” according to the website Heartbleed.com, which was set up by Codenomicon. “This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content.”
 
Codenomicon said it had tested its own services “from an attacker’s perspective" and successfully stolen “usernames and passwords, instant messages, emails and business critical documents” all “without leaving a trace.”
 
The discovery of the bug prompted the U.S. Department of Homeland Security to issue a warning computer users and systems administrators to see whether they’re using OpenSSL.
 
Codenomicon is advising service providers and users to “install the fix as it becomes available for the operating systems, networked appliances and software they use.”

Experts say Heartbleed is serious and of concern to all Internet users, but that before changing passwords, check to see that the bug has been patched.

"Many are calling for an immediate change to passwords - a call to action I fully endorse with one caveat," said Christopher Burgess, CEO of Prevendra, Inc., an Internet security firm. "If the entity with whom you are about to change your password has not updated their SSL, you are changing your password into an insecure environment.  I advocate checking for the update from your vendor - once they confirm, then change the password to a strong password."

Burgess added that it's important to remember that the problem isn't on your device or machine, but rather on the servers supporting websites we visit each day.

You can check if a website has updated its servers by visiting this Heartbleed testing site.

You May Like

Will Cuba Follow the Southeast Asia Model?

Decision to restore ties between US and Cuba has some debating whether it will lead to enhancement or regression of democracy for Communist island nation More

Kenyan Designer Finds Her Niche in Fashion Industry

‘Made in China’ fabrics underlie her success More

Report: CIA, Israel's Mossad Killed Senior Hezbollah Commander

The Washington Post story says Imad Mughniyah was killed instantly by a bomb "triggered remotely" from Tel Aviv by Mossad agents More

This forum has been closed.
Comments
     
There are no comments in this forum. Be first and add one

Featured Videos

Your JavaScript is turned off or you have an old version of Adobe's Flash Player. Get the latest Flash player.
Jefferson's Library Continues to Impress, 200 Years Lateri
X
Deborah Block
January 31, 2015 12:12 AM
Two hundred years after the U.S. Congress purchased a huge collection of books belonging to former President Thomas Jefferson, it remains one of America’s greatest literal treasures and has become the centerpiece of Washington’s Library of Congress. VOA’s Deborah Block reports.
Video

Video Jefferson's Library Continues to Impress, 200 Years Later

Two hundred years after the U.S. Congress purchased a huge collection of books belonging to former President Thomas Jefferson, it remains one of America’s greatest literal treasures and has become the centerpiece of Washington’s Library of Congress. VOA’s Deborah Block reports.
Video

Video Egypt's Suez Canal Dreams Tempered by Continued Unrest

Egypt plans to expand the Suez Canal, raising hopes that the end of its economic crisis may be in sight. But some analysts say they expect the project may cost too much and take too long to make life better for everyday Egyptians. VOA's Heather Murdock reports.
Video

Video Threat of Creeping Lava Has Hawaiians on Edge

Residents of the small town of Pahoa on the Big Island of Hawaii face an advancing threat from the Kilauea volcano. Local residents are keeping a watchful eye on creeping lava. Mike O’Sullivan reports.
Video

Video Pro-Kremlin Youth Group Creatively Promotes 'Patriotic' Propaganda

As Russia's President Vladimir Putin faces international pressure over Ukraine and a failing economy, unofficial domestic groups are rallying to his support. One such youth organization, CET, or Network, uses creative multimedia to appeal to Russia's urban youth with patriotic propaganda. VOA's Daniel Schearf reports.
Video

Video Filmmakers Produce Hand-Painted Documentary on Van Gogh

The troubled life of the famous 19th century Dutch painter Vincent van Gogh has been told through many books and films, but never in the way a group of filmmakers now intends to do. "Loving Vincent " will be the first ever feature-length film made of animated hand-painted images, done in the style of the late artist. VOA’s George Putic reports.
Video

Video Issues or Ethnicity? Question Divides Nigeria

As Nigeria goes to the polls next month, many expect the two top presidential contenders to gain much of their support from constituencies organized along ethnic or religious lines. But are faith and regional blocs really what political power in Nigeria is about? Chris Stein reports.
Video

Video Rock-Consuming Organisms Alter Views of Life Processes

Scientists thought they knew much about how life works, until a discovery more than two decades ago challenged conventional beliefs. Scientists found that there are organisms that breathe rocks. And it is only recently that the scientific community is accepting that there are organisms that could get energy out of rocks. Correspondent Elizabeth Lee reports.
Video

Video Paris Attacks Highlight Global Weapons Black Market

As law enforcement officials piece together how the Paris and Belgian terror cells carried out their recent attacks, questions are being asked about how they obtained military grade assault weapons - which are illegal in the European Union. As VOA's Jeff Swicord reports, experts say there is a very active worldwide black market for these weapons, and criminals and terrorists are buying.
Video

Video Activists Accuse China of Targeting Religious Freedom

The U.S.-based Chinese religious rights group ChinaAid says 2014 was the worst year for religious freedom in China since the end of the Cultural Revolution. As Ye Fan reports, activists say Beijing has been tightening religious controls ever since Chinese leader Xi Jinping came to office. Hu Wei narrates.
Video

Video Theologians Cast Doubt on Morality of Drone Strikes

In 2006, stirred by photos of U.S. soldiers mistreating Iraqi prisoners, a group of American faith leaders and academics launched the National Religious Campaign Against Torture. It played an important role in getting Congress to investigate, and the president to ban, torture. VOA's Jerome Socolovsky reports.
Video

Video Former Sudan 'Lost Boy' Becomes Chess Master in NYC

In the mid-1980’s, thousands of Sudanese boys escaped the country's civil war by walking for weeks, then months and finally for more than a year, up to 1,500 kilometers across three countries. The so-called Lost Boys of the Sudan had little time for games. But one of them later mastered the game of chess, and now teaches it to children in the New York area. VOA’s Bernard Shusman in New York has his story.
Video

Video NASA Monitors Earth’s Vital Signs From Space

The U.S. space agency, NASA, is wrapping up its busiest 12-month period in more than a decade, with three missions launched in 2014 and two this month, one in early January and the fifth scheduled for January 29. As VOA’s Rosanne Skirble reports, the instruments being lifted into orbit are focused on Earth’s vital life support systems and how they are responding to a warmer planet.

Circumventing Censorship

An Internet Primer for Healthy Web Habits

As surveillance and censoring technologies advance, so, too, do new tools for your computer or mobile device that help protect your privacy and break through Internet censorship.
More

All About America

AppleAndroid