How to Protect Yourself From the Heartbleed Bug or Attack
|
|
How it Works?
The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users.
Why it is called the Heartbleed Bug?
Bug is in the OpenSSL's implementation of the TLS/DTLS (transport layer security protocols) heartbeat extension (RFC6520). When it is exploited it leads to the leak of memory contents from the server to the client and from the client to the server.
How to Check your Site If they are are Vulnerable?
1.) First of all check if the sites you use every day on an individual basis are vulnerable to Heartbleed bug or not using http://filippo.io/Heartbleed/, and if you're given a red flag, avoid the site for now.
2.) LastPass also created a Web app that will tell you what kind of encryption a site uses, and when the encryption was last updated.
3.) Provensec also created a scanner at http://provensec.com/heartbleed/
4.) GlobalSign SSL Configuration Checker.
STEPS TO PROTECT YOURSELF FROM HEARTBLEED
- First Change your passwords. ALL of them. This article from Mashable will get you started.
- As long as you’re changing passwords, use this opportunity to start using different passwords for every site. It’s really easy with LastPass, which has a terrific free version. A password utility like this will securely generate, store, and enter passwords for you. Once you’ve used it for a week, you won’t want to go back to memorizing all of your passwords or using the same password on multiple sites (Heartbleed shows just how dangerous that can be).
- Never reuse same passwords again in the future.
- OpenSSL version 1.0.1 through 1.0.1f and 1.0.2-beta1 are Vulnerable and flaw is fixed in OpenSSL 1.0.1g. If you haven't yet, please update your system that use OpenSSL for TLS encrypted communications.
- It is good to use the two-factor authentication, which means with the password, the account requires a freshly generated pass code that shows up only on your personal Smartphone, before getting into certain websites for financial transaction.
That’s it! Enjoy and Be Safe. Any Comments are welcomed below.
Join me on Google+
|
|
Respected Readers :-
|
E njoyed this post very much – So why not you Subscribe to our regular Email Updates ! and stay connected with us forever .
Hello everyone i would like to share my experience with internetexplorer173@gmail.com he was able to hack my cheating partners phone without making physical contact with the phone under 12hours, he is the best out there , i was skeptical about him at the beginning but he honestly did a great job, he is reliable and trust worthy, he can dig into facebook, whatsapp, email snap etc within a few hours. You can use him for your hacking needs too.
ReplyDeletehjuuu
ReplyDelete⚠️⚠️CRYPTOCURRENCY SCAM ALERT 📢 🚨
ReplyDeleteThis is to inform the general public that there are lots of cryptocurrency investments scam out there, this investments scam promises you lots of profits return and it all turns out to be a scam, but here is good news to individuals who have been victims of this type of scam.
You could still recover your money back from the scammers, all you have to do is contact ⭐PYTHONAX⭐ and hope that the scammers still has your money.
⭐PYTHONAX ⭐ are a group of talented and experts on tracking down scammers, this is possible by using transaction history and identification info, website location to help scammed victims recover thier money back.
Don't be scared or shy to make contact with ⭐PYTHONAX⭐ as your identity isn't required and you can choose to be anonymous while you are been attended to. You will need to provide informations about the scam, informations that would help track down the scammers.
The informations required are simple stuffs like Means of contact with the scams (Emails, social media handles or phone numbers), transaction records (may or may not include screenshots) and details of the scam process used by the scammers.
⭐PYTHONAX⭐ can also help with other issues like-:
❌Buying and Selling scams.
❌Binary Options and Forex Scams.
❌Dating and Romance Scams.
❌identity Theft Scams.
✅Computer & Phone Hacks.
✅Social Media and Emails Hacks.
Use the emails below for contact-:
Pythonaxhelp@protonmail.com
Pythonaxservices@protonmail.com