Advice, news, debate
and discussion
all in one place

Heart a’Hack

Around two-thirds of websites are vulnerable to ‘heartbleed hackers’

stealing data

The Heartbleed bug came to fore three days ago, discovered April 7, and is wreaking havoc for many companies having gone undetected for the past 2 years. Here’s a simple breakdown of what the bug is and what this actually means for us…

Heartbleed is a security bug that potentially allows for the theft of data typically protected by OpenSSL (the open source implementation of the SSL/TLS encryption software most websites use, including many popular banking and retail sites).  OpenSSL is a popular cryptographic library used to digitally scramble sensitive data as it passes to and from computer servers so that only the service provider and the intended recipients can make sense of it.  Affecting around 67% of websites this flaw lets hackers digitally unscramble information and eavesdrop on communications between servers and steal data as they wish without leaving a trace.

The implications are enormous! It is hard to predict the actual impact it will have though we know it will be huge. The exploitation of this bug leaves no trace of any abnormal happenings to the logs and can go undetected; essentially we might never know what data has been compromised and what information has been stolen which is quite a sobering reality.

Looks like it’s going to be a long week for IT Professionals who need to, update servers and patch up vulnerabilities to prevent the leak of any more secure data.

Read more: http://heartbleed.com/

https://www.linkedin.com/today/post/article/20140409194858-2259773-heartbleed-a-data-security-bug-of-titantic-proportions-that-affects-most-of-the-internet-and-that-will-have-enormous-implications?trk=tod-home-art-list-small_1

http://www.techradar.com/news/internet/web/google-slaps-heartbleed-tourniquet-on-most-key-services-1241211?src=rss&attr=all

http://www.bbc.co.uk/news/technology-26954540

http://www.theguardian.com/technology/2014/apr/09/heartbleed-dont-rush-to-update-passwords-security-experts-warn

http://www.dailymail.co.uk/sciencete  ch/article-2600701/Are-YOUR-details-risk-heartbleed-hackers.html#ixzz2yTSZBNoE

Share this… @zebrapeople

Leave a reply

Leave a Reply

Latest views

Things to avoid on your CV We’ve all been there. Totally over your current role. Decide to look for a new job. Start by putting your LinkedIn profile to ‘open to new opportunities’. Start scrolling through then think to yourself, ‘Oh, that one looks good. I could do that’ Click apply. Leads you to a […]

As recruiters we speak to hiring managers all the time helping them to make crucial hires. Sometimes, we’re talking to hiring managers who are starting completely from scratch in an environment that doesn’t understand what UX even means. So where do you start? That’s not an easy question to answer and even more difficult to […]

Having been in recruitment for over 10 years now and over 7 years specifically recruiting for the User Experience sector, I’ve learnt some fairly frank points I’d like to share. The below doesn’t cater for every single scenario and there are plenty more points that could be made, but for the sake of not turning […]

Tanked your first UX interview? Here’s 4 things you can do to make sure it doesn’t happen again… We’ve all been there. You’ve spent hours scouring the internet for info on the company. You’ve sent a LinkedIn connection request to the CEO right through to the cleaner. You’ve even forked out a bit of cash […]

The UXPA careers event which Zebra People went to a few nights ago was very interesting, not only was it great to see junior candidates eager to land their first role in UX, but we also got to mix with some well-known industry clients such as Ticketmaster, Just Eat and Foolproof. Our intention was to […]

VR / AR is an area continuing to grow in the Film & Motion industry. I’m putting together a series of interviews with prominent studios who are leading the way in VR/AR development. The sorts of things I’ll be looking to probe are: how VR and AR work, how the industry is evolving and what […]

VR / AR is an area continuing to grow in the Film & Motion industry. I’m putting together a series of interviews with prominent studios who are leading the way in VR/AR development. The sorts of things I’ll be looking to probe are: how VR and AR work, how the industry is evolving and what […]

‘Hire Different’ – Can Recruitment Change The Diversity Story? I recently went to an event hosted by Facebook Creative Shop, where the topic was how recruitment can change the diversity story within the creative and tech industries. I received the invite with not overly high expectations to be honest, as I’ve been to a fair […]