http://www.idkfa.com/v3 idkfa: syndicated http://www.idkfa.com/v3/v_thread.php?thread_id=6290&msg_id=6681 Fascinating, and a little scary for a follow-up. The Heartbleed bug was used to steal ~4.5 million medical records from healthcare provider Community Health Services. As the article comments point out, their intrusion started only a month or two after the Hearthbleed month was publicly announced, well within what I've experienced what a large company's patch turnaround might be. What's interesting, also, is that the affected device was a router (a specialized computer which sits at the edge of a large network and merely routes traffic according to defined rules), not a server on which the data would have resided. And this is why I patched my shit within 24 hours. Though, I'm pretty sure I still have a few unpatched non-essential machines sitting at home. Behind an age'd WRT54G. (sigh) kaiden@idkfa.com (kaiden) Indiscernible from Magic Wed, 20 Aug 2014 11:50:42 -0800 http://idkfa.com/v3/v_thread.php?thread_id=6290&msg_id=6681 http://www.idkfa.com/v3/v_thread.php?thread_id=6290&msg_id=6292 "Often popular explanations of security bugs require the issue to be simplified a lot and to leave out a lot of details. But in this case the bug is actually that simple." -http://www.explainxkcd.com/wiki/index.php/1354 kitacek@idkfa.com (kitacek) Indiscernible from Magic Fri, 11 Apr 2014 13:09:07 -0800 http://idkfa.com/v3/v_thread.php?thread_id=6290&msg_id=6292 http://www.idkfa.com/v3/v_thread.php?thread_id=6290&msg_id=6291 I'm sure it's more complicated than that, but I'm glad I have some sort of idea what was going on. Scrotor@idkfa.com (Scrotor) Indiscernible from Magic Fri, 11 Apr 2014 13:05:55 -0800 http://idkfa.com/v3/v_thread.php?thread_id=6290&msg_id=6291 http://www.idkfa.com/v3/v_thread.php?thread_id=6290&msg_id=6290 XKCD explains the Heartbleed bug: kaiden@idkfa.com (kaiden) Indiscernible from Magic Fri, 11 Apr 2014 12:37:25 -0800 http://idkfa.com/v3/v_thread.php?thread_id=6290&msg_id=6290