FC Forums

Is the forum affected by it? Also I just learned that you might want to change your minecraft password.

I should probably do that.

No, the forum is safe from SSL exploits - it doesn't even use SSL.

SSL*

SSH is something else entirely :P

And yes, it is affected. Apache uses OpenSSL, which is where the vulnerability lies. You'll want to update it when a patched version is out.

Tiel wrote:SSL*

SSH is something else entirely :P

Sorry, I had just woken up from a nap.

And as far as I know, none of the website - even the login page - is actually secured in any meaningful way. I'll update everything, though, just because I should.

According to a random persons blog I saw earlier heart bleed works by dumping the servers recent memory to the hacker, so reasonably speaking changing your password would have higher chance of giving it to the hacker.

Il preper the laz0rs for when you all start advertising Canadian despots

Shadowcat wrote:According to a random persons blog I saw earlier heart bleed works by dumping the servers recent memory to the hacker, so reasonably speaking changing your password would have higher chance of giving it to the hacker.

Except if you're changing it on services that got the security update that fixes Heartbleed.

Ivan2006 wrote:

Shadowcat wrote:According to a random persons blog I saw earlier heart bleed works by dumping the servers recent memory to the hacker, so reasonably speaking changing your password would have higher chance of giving it to the hacker.

Except if you're changing it on services that got the security update that fixes Heartbleed.

But how do you know it got updated? What if the service itself was hacked? What if the update is really a fake update that's a hack that steals your DNA so they can clone you an steal your identity.

Never trust a machine! The robot uprising is happening! Except for you proto your cool.

Shadowcat wrote:

Ivan2006 wrote:

Shadowcat wrote:According to a random persons blog I saw earlier heart bleed works by dumping the servers recent memory to the hacker, so reasonably speaking changing your password would have higher chance of giving it to the hacker.

Except if you're changing it on services that got the security update that fixes Heartbleed.

But how do you know it got updated? What if the service itself was hacked? What if the update is really a fake update that's a hack that steals your DNA so they can clone you an steal your identity.

Never trust a machine! The robot uprising is happening! Except for you proto your cool.

Proto is not a robot. He has been confirmed to be a motorcycle.

Daynel wrote: Proto is not a robot. He has been confirmed to be a motorcycle.

Shadowcat wrote:According to a random persons blog I saw earlier heart bleed works by dumping the servers recent memory to the hacker, so reasonably speaking changing your password would have higher chance of giving it to the hacker.

That was actually pretty informative. Thank you.

LJS' comic was propably the most informative description of Heartbleed I ever got.

XKCD, for the win.