Warning to change your passwords
Login
User Name
Password   


Registration is FREE. Click to become a member of OrchidBoard community
(You're NOT logged in)

menu menu

Sponsor
Donate Now
and become
Forum Supporter.

Warning to change your passwords
Many perks!
<...more...>


Sponsor
 

Google


Fauna Top Sites
LOG IN/REGISTER TO CLOSE THIS ADVERTISEMENT
  #1  
Old 04-09-2014, 01:20 PM
RosieC RosieC is offline
Senior Member
 

Join Date: Jul 2008
Zone: 8a
Location: West Midlands, UK
Age: 49
Posts: 25,462
Exclamation Warning to change your passwords

A recent security flaw has been found on the internet and experts are warning people to change all their internet passwords.

I don't know that this affects orchid board or not, I don't think this site uses SSL. However I'm sharing this warning because you might be using other sites that could have been affected (such as Flickr). Changing your password here (just in case) also can't hurt. I'm going to do mine.

See this BBC report for more info.

BBC News - Heartbleed Bug: Public urged to reset all passwords
Reply With Quote
  #2  
Old 04-09-2014, 01:53 PM
RandomGemini RandomGemini is offline
Senior Member
 

Join Date: Jul 2013
Zone: 5b
Location: Spokane, WA
Posts: 2,436
Warning to change your passwords Female
Default

If the web server that OB is running on uses Apache, then OB IS affected because Apache uses OpenSSL.

Since 90% of the websites on the Internet are hosted on web servers running Apache, everyone who used web based anything should change their passwords immediately.
Reply With Quote
  #3  
Old 04-09-2014, 02:02 PM
RosieC RosieC is offline
Senior Member
 

Join Date: Jul 2008
Zone: 8a
Location: West Midlands, UK
Age: 49
Posts: 25,462
Default

Thanks, good to know.

Because of the name I thought it might be only SSL secured sites, but I'm changing all my passwords whether I think the site is affected or not. I would advise everyone to do the same.
Reply With Quote
  #4  
Old 04-09-2014, 02:09 PM
ALToronto ALToronto is offline
Senior Member
 

Join Date: Dec 2012
Posts: 753
Warning to change your passwords Female
Default

OK, just to be a devil's advocate - what's the harm in having the OB password stolen by someone? Is a hacker with too much time on his hands going to post some spam under my name? Don't forget, this bug has been around for two years. Have we had an epidemic of sketchy posts made by members? Well, maybe we have, but they weren't made by impersonators.

I've changed my email password - that's the most important one that everyone should change. Banking is another biggie. Facebook, LinkedIn and Twitter should also be changed. But special interest forums - I have enough trouble remembering them every time I get a new gadget to login with.

We have the benefit of security through obscurity, and it's usually the most effective.
Reply With Quote
  #5  
Old 04-09-2014, 02:17 PM
RosieC RosieC is offline
Senior Member
 

Join Date: Jul 2008
Zone: 8a
Location: West Midlands, UK
Age: 49
Posts: 25,462
Default

I agree to some extent, and I'm not in a rush to change my passwords on most forums, more things like my google/email account, my Flickr account, my Facebook account.

Something else to be aware of. If OB is affected then it will need patching to get rid of the problem, until that is done changing your password here is pointless.

Changing your password on any unfixed site is pointless.
Reply With Quote
  #6  
Old 04-09-2014, 02:18 PM
RandomGemini RandomGemini is offline
Senior Member
 

Join Date: Jul 2013
Zone: 5b
Location: Spokane, WA
Posts: 2,436
Warning to change your passwords Female
Default

Rosie, it is a bug in OpenSSL and TSL, but since these libraries are used by just about everything on the Internet, including stuff that you wouldn't think would need it, just about everything has the potential to be compromised from your Online Banking password, to your OB password. That's why this security alert is so scary to anyone working in IT today.
Reply With Quote
  #7  
Old 04-09-2014, 02:47 PM
RosieC RosieC is offline
Senior Member
 

Join Date: Jul 2008
Zone: 8a
Location: West Midlands, UK
Age: 49
Posts: 25,462
Default

Quote:
Originally Posted by ALToronto View Post
Don't forget, this bug has been around for two years. Have we had an epidemic of sketchy posts made by members? Well, maybe we have, but they weren't made by impersonators.
One point made in the link I posted is that now it's been made public it's become really easy for hackers to make use of it... because they know it exists now.

---------- Post added at 07:47 PM ---------- Previous post was at 07:22 PM ----------

Quote:
Originally Posted by RandomGemini View Post
Rosie, it is a bug in OpenSSL and TSL, but since these libraries are used by just about everything on the Internet, including stuff that you wouldn't think would need it, just about everything has the potential to be compromised from your Online Banking password, to your OB password. That's why this security alert is so scary to anyone working in IT today.
OK, while I work in IT, I don't do much in these areas so don't fully comprehend what this is.

My thought was that non-SSL sites can easily be compromised anyway.

Someone can intercept the messages sent from client to server and with a non SSL site like this someone could intercept the passwords anyway.

I thought this was a hole in the SSL to allow this to happen as well. However I will gladly bow to people with more knowledge on this than me.

Last edited by RosieC; 04-09-2014 at 03:35 PM..
Reply With Quote
  #8  
Old 04-09-2014, 03:15 PM
RandomGemini RandomGemini is offline
Senior Member
 

Join Date: Jul 2013
Zone: 5b
Location: Spokane, WA
Posts: 2,436
Warning to change your passwords Female
Default

I think you're right, that is the general idea of what this bug allows to happen.
Reply With Quote
Reply

Bookmarks

Tags
bbc, change, internet, passwords, warning


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
how many hobbiests does it take to change a lightbulb? Call_Me_Bob Off Topic - Totally 25 04-14-2011 11:14 AM
A Warning To All! Becca Off Topic - Totally 11 01-03-2009 02:11 AM
gettting security warning? flhiker News, Updates & Feedback 18 09-20-2008 08:34 PM
Global meltdown Tindomul Off Topic - Totally 105 05-14-2008 04:23 PM
when is it best to change to S/H luckygrower Semi-Hydroponic Culture 5 08-16-2007 06:07 AM

All times are GMT -4. The time now is 04:38 AM.

© 2007 OrchidBoard.com
Search Engine Optimisation provided by DragonByte SEO v2.0.37 (Lite) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
Feedback Buttons provided by Advanced Post Thanks / Like (Lite) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.

Clubs vBulletin Plugins by Drive Thru Online, Inc.