You may have heard about or received contact about the Heartbleed vulnerability recently. We have put together the following FAQ to help answer your questions:
- What is Heartbleed?
Heartbleed is a vulnerability in SSL, which is the method that most traffic is encrypted on the internet.
- How does it work?
The flaw in SSL allows servers that serve encrypted traffic over the internet that allows attackers to dump the memory of the webserver and read the encrypted web requests to the server in an unencrypted format.
- In plain English?
Any time you log in to a site, attackers have a brief window in which they can dump your username and password from the server without you knowing.
- Have I been affected?
It is very likely that you have. It is estimated the nearly two-thirds of the Internet is/was vulnerable to this bug. Making matters worse, this bug has existed for nearly two years without ...
↧