WTF??? Heartbleed & lastpass & gmail

[d-trix]

There have been numerous articles on this, but causing more confusion. Many give you a link to see if a site is safe or not, but there are several links and they give conflicting results. Also, they say don't change your password until you know the site has been fixed, but no site I've logged onto has said anything.

[counter]

some useful info to be had here and I thank you all for putting your finding here so folks can try and keep up with their security.  Sub'd

[smooth]

I knew my shit was fucked with in gmail a few months back, I made a post about it.

http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/

https://bitcointalk.org/index.php?topic=159424.msg6183743#msg6183743

hmm can we get a list of bitcoin related services and websites that might be effected by Heartbleed..! and do we need to change password of almost every internet service we use that uses OPEN SSL

its worse than that, changing ur password wont help if the site does not update their software

Worst than that. The site not only needs to upgrade their software, but also replace their private key and and get a new certificate issued. Many sites are never going to do this (or they will just get a new certificate without creating a new private key, which does not close the hole).

Don't expect anything on the internet to be secure any time soon, if ever. Be careful, especially with coins.