Tuesday 22 April 2014

Heartbleed

A very recent issue that has had an effect on almost all websites even giants such as google and Facebook. It has been described as "the worst vulnerability found (at least in terms of its potential impact) since commercial traffic began to flow on the Internet." by Joseph Steinburg a Writer for Forbes. The problem arose when a piece of software known as OpenSSL that encrypts data from a computer to a website to keep information getting passed safe. It means that information can be stolen such as passwords and usernames that are still on the website server without anyone even knowing it was taken. Jose Andrade explains the name "Heartbleed exploits a built-in feature of OpenSSL called heartbeat. When your computer accesses a website, the website will respond back to let your computer know that it is active and listening for your requests: This is the heartbeat."This didn't damage a specific companies reputation but rather all company's as faith has been lost on purchasing online due to panic that details are not safe. This was particularly dangerous as anyone with a bit of reading could access data from websites with OpenSSL. Many people are already cautious about purchasing online and even giving any form of details so this recent news story telling the public that it was relatively easy to steal details through this OpenSSL gave people more reason to be cautious.


http://www.forbes.com/sites/josephsteinberg/2014/04/10/massive-internet-security-vulnerability-you-are-at-risk-what-you-need-to-do/

http://www.engadget.com/2014/04/12/heartbleed-explained/

No comments:

Post a Comment