http://citycyclingedinburgh.info/bbpress/ CityCyclingEdinburgh Forum » Topic: Heartbleed - FYI yahoo and flickr users en Sat, 16 May 2026 22:17:48 +0000 http://citycyclingedinburgh.info/bbpress/topic.php?id=12548#post-148413 Wed, 09 Apr 2014 11:24:58 +0000 Darkerside 148413@http://citycyclingedinburgh.info/bbpress/ <p>Verge has a decent summary as well:</p> <p><a href="http://www.theverge.com/2014/4/8/5594266/how-heartbleed-broke-the-internet" rel="nofollow">http://www.theverge.com/2014/4/8/5594266/how-heartbleed-broke-the-internet</a> </p> http://citycyclingedinburgh.info/bbpress/topic.php?id=12548#post-148407 Wed, 09 Apr 2014 11:10:17 +0000 Cyclingmollie 148407@http://citycyclingedinburgh.info/bbpress/ <p>wfb: <em>"Flickr seems to be part of Yahoo"</em> Thanks, I knew I had an account linked to Yahoo but I couldn't remember what it was. </p> http://citycyclingedinburgh.info/bbpress/topic.php?id=12548#post-148400 Wed, 09 Apr 2014 11:00:27 +0000 wee folding bike 148400@http://citycyclingedinburgh.info/bbpress/ <p>Flickr seems to be part of Yahoo, when I went to reset the Flickr password it sent me there. </p> http://citycyclingedinburgh.info/bbpress/topic.php?id=12548#post-148379 Wed, 09 Apr 2014 09:52:24 +0000 Darkerside 148379@http://citycyclingedinburgh.info/bbpress/ <p>I use Lastpass for password management, but for the key things I just use the xkcd random words strung together tactic linked above. </p> http://citycyclingedinburgh.info/bbpress/topic.php?id=12548#post-148374 Wed, 09 Apr 2014 09:37:18 +0000 Arellcat 148374@http://citycyclingedinburgh.info/bbpress/ <p>Good article on cnet.com:</p> <p><a href="http://www.cnet.com/uk/news/heartbleed-bug-undoes-web-encryption-reveals-user-passwords/" rel="nofollow">http://www.cnet.com/uk/news/heartbleed-bug-undoes-web-encryption-reveals-user-passwords/</a></p> <p>Google: not affected<br /> Twitter: not affected<br /> Yahoo: has fixed the issue </p> http://citycyclingedinburgh.info/bbpress/topic.php?id=12548#post-148368 Wed, 09 Apr 2014 09:28:50 +0000 wee folding bike 148368@http://citycyclingedinburgh.info/bbpress/ <p>OS X Mavericks will suggest passwords for you then sync up your other Macs/iDevices.</p> <p>I've not let it work yet as it feels a wee bit too SkyNet. I also don't know how it handles Flickr which is web site but also integrated into iOS. Will it up date the web password but not the one held in the settings? I suppose an experiment is called for. </p> http://citycyclingedinburgh.info/bbpress/topic.php?id=12548#post-148366 Wed, 09 Apr 2014 09:20:38 +0000 Darkerside 148366@http://citycyclingedinburgh.info/bbpress/ <p>Google around for 'heartbleed'; it's a pretty stonking bug with a type of encryption used on the web. Discovered yesterday, but apparently sites have been vulnerable since 2011. Key outcome for most people being that their usernames and passwords for affected sites (and any sites that share those passwords) should be considered compromised.</p> <p>Flickr and Yahoo are two of the sites affected. If you're a customer of either you'll probably want to change your passwords as soon as they announce they've fixed their servers. </p> <p>To give you an idea of the sale of the problem, TOR is currently recommending that anyone who relies on internet security for their welfare stays offline for the next few days.</p> <p>If you're resetting passwords, might as well pick a good one...: <a href="http://xkcd.com/936/" rel="nofollow">http://xkcd.com/936/</a> </p>