| |
Conrad
Registered: Nov 2006
Posts: 856 |
"HeartBleed"
So I was reading some news this morning about this so-called "Heartbleed" bug, which would try to decrypt your account passwords when you log in.
Out of interest I put in the CSDB website (both the .dk and .c64.org domains) in the checker tool provided by LastPass (https://lastpass.com/heartbleed), and reports that
the CSDB website is vulnerable to the bug due to using OpenSSL.
Even though this site is proned to this bug, do any of you reckon that it won't pay the cost of losing a lot of data on this website? At the
end of the day, this is a small community compared to Facebook, Google+ etc. |
|
| |
Shine
Registered: Jul 2012
Posts: 387 |
Very interesting! |
| |
Burglar
Registered: Dec 2004
Posts: 1137 |
the check linked by conrad is probably incorrect. afaik openssl 0.9.8 is *not* vulnerable. |
| |
lemming
Registered: Oct 2009
Posts: 44 |
Yup, Burglar is right, 0.9.8-series is ok.
Also http://filippo.io/Heartbleed/#csdb.dk |
| |
scout
Registered: Dec 2002
Posts: 1578 |
All you want to know about the Hearbleed bug, which OpenSSL versions are vulnerable and which are not: http://heartbleed.com/
Also, use the link Lemming posted and not that lastpass thing.
Off to re-create some private keys...Bye! :D |
| |
Beastifire
Account closed
Registered: Mar 2013
Posts: 40 |
So who will code the first C64 SSL implementation? :) |
| |
Perff
Administrator
Posts: 1684 |
I learned about this bug yesterday and found CSDb to be unaffected, so didn't think more about it. :) |
| |
Sith
Account closed
Registered: Jul 2013
Posts: 17 |
I hardly think any professional hackers would be bothered hacking into a website about us old farts enjoying our beloved old computer anyway. It is not profitable to them. :)
They will target any site that involves financial transactions and inputting credit card data though. |
| |
chatGPZ
Registered: Dec 2001
Posts: 11510 |
uh. it doesnt work like that. they are using scripts that attack whatever site, and what they are after are simply login credentials - because chances are high you used them elsewhere too. |
| |
Peacemaker
Registered: Sep 2004
Posts: 279 |
this server IS not vulnerable. just checked it with my script :> |
| |
Perff
Administrator
Posts: 1684 |
Good to get it confirmed. :) |
