Author Topic: bug in openSSL lets people hijack accounts and steal information en masse  (Read 1892 times)




NASA and imgur got bled. I saw the leaks. It just looks like a network brown townysis of it (if you have ever seen one).

« Last Edit: April 09, 2014, 06:07:43 PM by lolz?? »

Okay. "hijack accounts" is a bit harsh. Heartbleed allows a call for a random packet of about 64 bits of data from the OpenSSL system within the server. However, it can be called again and again and again, and MAYBE a hacker could patch together some data that would allow them to access secure data. It's also just one version of OpenSSL (that unfortunately a lot of people used)

However, what's unfortunate is that this hole in security is obvious when you do a network brown townysis on the server.

This happened to steam yesterday apparently.

Okay. "hijack accounts" is a bit harsh. Heartbleed allows a call for a random packet of about 64 bits of data from the OpenSSL system within the server.
64,000 bytes of data*

« Last Edit: April 09, 2014, 12:22:29 PM by Port »

Okay. "hijack accounts" is a bit harsh. Heartbleed allows a call for a random packet of about 64 bits of data from the OpenSSL system within the server. However, it can be called again and again and again, and MAYBE a hacker could patch together some data that would allow them to access secure data. It's also just one version of OpenSSL (that unfortunately a lot of people used)

However, what's unfortunate is that this hole in security is obvious when you do a network brown townysis on the server.
not even harsh at all, they can compromise literally all the memory on the server 64kb of data at a time.

it came out two loving days ago, theoretically allows for compromisation of private data from any vulnerable server, and is pretty super loving important, so forget off

http://heartbleed.com
« Last Edit: April 09, 2014, 02:04:30 PM by Lugnut »

Yea it was apparently on steam but they squashed it


There's flies everywhere in my house right now so that fooled me


Announcing this bug just makes it worse. Someone mentioned that this bug has been present for quiet a while now.