[White_Hat1984]

How is heartbleed made? If I can better understand it. I can better protect against it

[RaccoonCity_mybb_import13707]

Uhm, I mean.

As long as you don't have a website, or use OpenSSL 1.0.1 which is the vulnerable version of OpenSSL you're fine.

I don't really get what you're asking for. Are you asking how to exploit it or how it works?

[BlueCat]

Uhm, I mean.

As long as you don't have a website, or use OpenSSL 1.0.1 which is the vulnerable version of OpenSSL you're fine.

I don't really get what you're asking for. Are you asking how to exploit it or how it works?

I think he's asking how did it first come about, What caused it etc

[RaccoonCity_mybb_import13707]

Uhm, I mean.

As long as you don't have a website, or use OpenSSL 1.0.1 which is the vulnerable version of OpenSSL you're fine.

I don't really get what you're asking for. Are you asking how to exploit it or how it works?

I think he's asking how did it first come about, What cause it etc

Oh

[BlueCat]

How is heartbleed made? If I can better understand it. I can better protect against it

This shall give you a good understanding.

http://www.cbc.ca/news/technology/heartb...-1.2603988

[alok9shm]

Uhm, I mean.

As long as you don't have a website, or use OpenSSL 1.0.1 which is the vulnerable version of OpenSSL you're fine.

If you don't have a website or don't use OpenSSL 1.0.1, you should still be worried. Maybe you have registered an account on a website and That website is vulnerable to the HB bug, then your account credentials are at risk. Isn't it?

[Anima Templi]

For SSL to work, your computer needs to communicate to the server via sending 'heartbeats' that keep informing the server that client (computer) is online (alive).
Heartbleed attack allows an attacker to retrieve a block of memory of the server up to 64kb in response directly from the vulnerable server via sending the malicious heartbeat and there is no limit on the number of attacks that can be performed.
It opens doors for the cyber criminals to extract sensitive data directly from the server's memory without leaving any traces.

[RaccoonCity_mybb_import13707]

Uhm, I mean.

As long as you don't have a website, or use OpenSSL 1.0.1 which is the vulnerable version of OpenSSL you're fine.

If you don't have a website or don't use OpenSSL 1.0.1, you should still be worried. Maybe you have registered an account on a website and That website is vulnerable to the HB bug, then your account credentials are at risk. Isn't it?

Yeah, I guess you're right.

[Anima Templi]

Pretty much every major website out there, which was affected by Heartbleed, has been patched. The massive media cover of the whole situation made it very hard, not to patch it.

[White_Hat1984]

For SSL to work, your computer needs to communicate to the server via sending 'heartbeats' that keep informing the server that client (computer) is online (alive).
Heartbleed attack allows an attacker to retrieve a block of memory of the server up to 64kb in response directly from the vulnerable server via sending the malicious heartbeat and there is no limit on the number of attacks that can be performed.
It opens doors for the cyber criminals to extract sensitive data directly from the server's memory without leaving any traces.

That was helpful thank you