Have you changed your password?
-
Perhaps I read it wrong, but the vulnerability allows someone to get the encryption keys that are used so at that point it won't matter how often you change your password, they can decrypt the traffic directly.
There are only 10 types of people in the world, those who understand binary and those who don't.
-
Perhaps I read it wrong, but the vulnerability allows someone to get the encryption keys that are used so at that point it won't matter how often you change your password, they can decrypt the traffic directly.
There are only 10 types of people in the world, those who understand binary and those who don't.
Seems like it was a server side[^] issue that could be problematic. And here[^] as well. I think its just a problem if you have the same password everywhere.
-
Perhaps I read it wrong, but the vulnerability allows someone to get the encryption keys that are used so at that point it won't matter how often you change your password, they can decrypt the traffic directly.
There are only 10 types of people in the world, those who understand binary and those who don't.
Yes, only change your password after the service have patched OpenSSL and reissued their SSL cert.
cheers, Paul M. Watson.