Heartbleed Bug

[Samantha]

Various companies urging you change every password you have as a major security flaw has been discovered. Apparently the flaw existed for over two years and sites such as Tumblr. has advised to change your passwords as your (user)name/email, password and other data might be compromised. However, on the other side other's have said there's no rush to do so.

http://www.bbc.co.uk/news/technology-26954540

[scottish]

I've seen nothing to imply there's been any exploits through this.

[Samantha]

I wasn't too sure about it, it's a little odd that the bug has been around for a couple of years without notice at the moment. That's probably why others say there's no need to rush.

[mrwoooooooo]

I think it's only yahoo who've asked people to change passwords tbh.

[Cerinacy$]

Most companies have managed to patch their online services, for example Habbo patched their server, in good time.

[GoldenMerc]

Most decent server techies have fixed this flaw...

[xxMATTGxx]

I think it's only yahoo who've asked people to change passwords tbh.

Mojang/Minecraft asked people to change as well if they logged within the pass 24 hours.

[karter]

im so lazy lmao cant change

[wixard]

lol

http://i.gyazo.com/73942156b3da47b3b74417c98117b64e.png

[GommeInc]

Most of the big companies seem to be unaffected other than Yahoo! Google says there is no need to but you can if you're unsure, ebay says no you don't, PayPal is indifferent, Amazon is fine other than if you own a server with them (by the looks of things) and all the US banks are fine. I can't find any info on UK banks.

[xxMATTGxx]

Yeah I think it's more of a precaution to change your details for the specific sites mentioned really.

[scottish]

http://www.theverge.com/2014/4/11/5604300/heartbleed-may-not-leak-private-ssl-keys-after-all

[The Don]

Here's a hit list of sites which have been affected, although I do think whoever compiled it is being overcautious.

http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/?utm_cid=mash-com-fb-main-link

I haven't changed any passwords yet, doubt I will do either. I have 2 step authentication on all my important accounts and if somebody wants to hack my twitter or reddit account then more for them. Although if you are planning on changing your passwords you should wait until the specific website has been patched otherwise your new password won't be secure.

[peteyt]

Users of LastPass can run a security check which will tell them of the sites possibly affected and if they should change their passwords for these sites yet or not, depending on if they have been patched yet