News / Science & Technology

'Heartbleed' Flaw Endangers Encrypted Data Online

FILE - A photo shows network cables connected to a server at the CeBIT Computer and IT Far in Hanover, northern Germany.
FILE - A photo shows network cables connected to a server at the CeBIT Computer and IT Far in Hanover, northern Germany.
A glitch in software meant to encrypt and protect online transactions has potentially exposed millions of passwords, credit card numbers and other sensitive bits of information to potential theft by computer hackers.
 
Security researchers at Google and Internet security firm Codenomicon revealed the breakdown, known as "Heartbleed", on Tuesday. The glitch was in a vulnerable version of software known as OpenSSL.  
 
OpenSSL software is meant to protect online accounts for emails, instant messaging and a wide range of electronic commerce.
 
Heartbleed is of particular concern because it went undetected for more than two years, making it difficult for people to know if they’ve been compromised. Security researchers are advising people to consider changing their online passwords.
 
“The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software,” according to the website Heartbleed.com, which was set up by Codenomicon. “This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content.”
 
Codenomicon said it had tested its own services “from an attacker’s perspective" and successfully stolen “usernames and passwords, instant messages, emails and business critical documents” all “without leaving a trace.”
 
The discovery of the bug prompted the U.S. Department of Homeland Security to issue a warning computer users and systems administrators to see whether they’re using OpenSSL.
 
Codenomicon is advising service providers and users to “install the fix as it becomes available for the operating systems, networked appliances and software they use.”

Experts say Heartbleed is serious and of concern to all Internet users, but that before changing passwords, check to see that the bug has been patched.

"Many are calling for an immediate change to passwords - a call to action I fully endorse with one caveat," said Christopher Burgess, CEO of Prevendra, Inc., an Internet security firm. "If the entity with whom you are about to change your password has not updated their SSL, you are changing your password into an insecure environment.  I advocate checking for the update from your vendor - once they confirm, then change the password to a strong password."

Burgess added that it's important to remember that the problem isn't on your device or machine, but rather on the servers supporting websites we visit each day.

You can check if a website has updated its servers by visiting this Heartbleed testing site.

You May Like

Turkey: No Ransom Paid for Release of Hostages Held by IS Militants

President Erdogan hails release of hostages as diplomatic success but declines to be drawn on whether their release freed Ankara's hand to take more active stance against insurgents More

Audio Sierra Leone Ends Ebola Lockdown

Health ministry says it has reached 75 percent of its target of visiting 1.5 million homes to locate infected, educate population about virus More

US Pivot to Asia Demands Delicate Balancing Act

As the tumult in the Middle East distracts Obama, shifting American focus eastward appears threatened More

This forum has been closed.
Comments
     
There are no comments in this forum. Be first and add one

Featured Videos

Your JavaScript is turned off or you have an old version of Adobe's Flash Player. Get the latest Flash player.
Natural Gas Export Plan Divides Maryland Towni
X
Deborah Block
September 21, 2014 2:12 PM
A U.S. power company that has been importing natural gas now wants to export it. If approved, its plant in Lusby, Maryland, would likely be the first terminal on the United States East Coast to export liquefied natural gas from American pipelines. While some residents welcome the move because it will create jobs, others oppose it, saying the expansion could be a safety and environmental hazard. VOA’s Deborah Block examines the controversy.
Video

Video Natural Gas Export Plan Divides Maryland Town

A U.S. power company that has been importing natural gas now wants to export it. If approved, its plant in Lusby, Maryland, would likely be the first terminal on the United States East Coast to export liquefied natural gas from American pipelines. While some residents welcome the move because it will create jobs, others oppose it, saying the expansion could be a safety and environmental hazard. VOA’s Deborah Block examines the controversy.
Video

Video Difficult Tactical Battle Ahead Against IS Militants in Syria

The U.S. president has ordered the military to intensify its fight against the Islamic State, including in Syria. But how does the military conduct air strikes in a country that is not a U.S. ally? VOA correspondent Carla Babb reports from the Pentagon.
Video

Video Iran, World Powers Seek Progress in Nuclear Talks

Iran and the five permanent members of the U.N. Security Council plus Germany, known as the P5 + 1, have started a new round of talks on Iran's nuclear program. VOA State Department correspondent Pam Dockins reports that as the negotiations take place in New York, a U.S. envoy is questioning Iran's commitment to peaceful nuclear activity.
Video

Video Alibaba Shares Soar in First Day of Trading

China's biggest online retailer hit the market Friday -- with its share price soaring on the New York Stock Exchange. The shares were priced at $68, but trading stalled at the opening, as sellers held onto their shares, waiting for buyers to bid up the price. More on the world's biggest initial public offering from VOA’s Bernard Shusman in New York.
Video

Video Obama Goes to UN With Islamic State, Ebola on Agenda

President Obama goes to the United Nations General Assembly to rally nations to support a coalition against Islamic State militants in Iraq and Syria. He also will look for nations to back his plan to fight the Ebola virus in West Africa. As VOA White House correspondent Luis Ramirez reports, Obama’s efforts reflect new moves by the U.S. administration to take a leading role in addressing world crises.
Video

Video Migrants Caught in No-Man's Land Called Calais

The deaths of hundreds of migrants in the Mediterranean this week has only recast the spotlight on the perils of reaching Europe. And for those forunate enough to reach a place like Calais, France, only find that their problems aren't over. Lisa Bryant has the story.
Video

Video Westgate Siege Anniversary Brings Back Painful Memories

One year after it happened, the survivors of the terror attack on Nairobi's Westgate Shopping Mall still cannot shake the images of that tragic incident. For VOA, Mohammed Yusuf tells the story of victims still waiting for the answer to the question 'how could this happen?'
Video

Video Militant Assault in Syria Displaces Thousands of Kurds

A major assault by Islamic State militants on Kurds in Syria has sent a wave of new refugees to the Turkish border, where they were stopped by Turkish border security. Turkey is already hosting about 700,000 Syrian refugees who fled the civil war between the government and the opposition. But the government in Ankara has a history of strained relations with Turkey's Kurdish minority. Zlatica Hoke reports Turkey is asking for international help.
Video

Video Whaling Summit Votes to Uphold Ban on Japan Whale Hunt

The International Whaling Commission, meeting in Slovenia, has voted to uphold a court ruling banning Japan from hunting whales in the Antarctic Ocean. Conservationists hailed the ruling as a victory, but Tokyo says it will submit revised plans for a whale hunt in 2015. Henry Ridgwell reports from London.
Video

Video A Dinosaur Fit for Land and Water

Residents and tourists in Washington D.C. can now examine a life-size replica of an unusual dinosaur that lived almost a hundred million years ago in northern Africa. Scientists say studying the behemoth named Spinosaurus helps them better understand how some prehistoric animals adapted to life on land and in water. The Spinosaurus replica is on display at the National Geographic museum. VOA’s George Putic has more.
Video

Video Iraqi Kurdistan Church Helps Christian Children Cope find shelter in churches in the Kurdish capital, Irbil

In the past six weeks, tens of thousands of Iraqi Christians have been forced to flee their homes by Islamic State militants and find shelter in churches in the Kurdish capital, Irbil. Despite U.S. airstrikes in the region, the prospect of people returning home is still very low and concerns are starting to grow over the impact this is having on the displaced youth. Sebastian Meyer reports from Irbil on how one church is coping.


Carnage and mayhem are part of daily life in northern Nigeria, the result of a terror campaign by the Islamist group Boko Haram. Fears are growing that Nigeria’s government may not know how to counter it, and may be making things worse. More

AppleAndroid