re: NSA discovered/exploited Heartbleed for two years

quote:

---

What's funny is that changing passwords won't matter.

---

Yes, it will. Any data collected will no longer be relevant.

quote:

---

This is a server/software side problem not a user.

---

Agreed.

quote:

---

You change the password without the site patching then the hacker has new password.

---

True, but not exactly. 1. Sites need to patch. 2. All the major sites will or have done so. 3. This is a packet capture attack that doesn't target one individual. IE, no one is getting all of your passwords.

quote:

---

Reality is no one is safe on Internet. If hackers want your info they can get it. It's luck if the draw.

---

True, in a way perhaps. But plain text data isn't secure data. The issue with this vulnerability in OpenSSL (which in general, neither MS or Apple uses) is that the public key/private key secure connections have been compromised.

quote:

---

We should be able to sue nsa for any problems we may have, but we all know that's not going to happen.

---

Not sure about suing the NSA, but I'm not surprised they've known about it for 2 years and decided to not tell anyone.