Thursday, April 10, 2014

Heartbleed - Trust But Verify - Clean Up - Aisle 42

Heartbleed.  The bug/virus is slowly affecting or affected or COULD affect about 60% of the systems on the Internet.  Everything is a RISK.  The simple solution: Change your password.  Why?  The new patches fix the problem but your password might be floating out there in Hacker land.

Who really was affected and why?  Well, the major players all used an OPEN version of SSL.  That's the little LOCK thing that happens when you do secure stuff like Buying stuff on Amazon.  The slower and more conservative players were NOT affected like Banks and Trading platforms (i.e. PNC, Ameritrade).

So, isn't OPEN good.  It is.  More eyes are watching things which is the best for all.  However, with everyone watching, none really was CHECKING stuff or looking deep into the code for errors or anomalies.  Everyone, in this fast-paced, 140 Character, 9 Second Attention Span world ignored the basic CHECK/BALANCE systems that are done when you are accountable for stuff.

So...OPEN is GOOD but Trust But Verify.

Now....Go change those Passwords.  Ok?

No comments:

Post a Comment