Skip to main content

New hacking challenge shows Heartbleed is as bad as we thought

blackberry roll heartbleed patches android ios week
Image used with permission by copyright holder

You’ll have been hearing a lot about the Heartbleed bug this week, and it’s now been confirmed that the vulnerability can be used to nab private security keys from a server. That means a rogue site could pose as a genuine one, and neither you nor your browser would be any the wiser.

A quick recap: Heartbleed allows hackers to ping vulnerable servers for all kinds of sensitive information, including email addresses, passwords and credit card numbers. At first, there was some debate about whether this information could include private SSL keys, in many ways the most valuable data for a hacker; now we have confirmation that it can.

White-hat hackers Fedor Indutny and Ilkka Mattila successfully took on the Heartbleed hacking challenge laid down by Web performance and security company CloudFlare. “We confirmed that both of these individuals have the private key and that it was obtained through Heartbleed exploits,” said CloudFlare.

Having access to these private keys means hackers can return even after the Heartbleed exploit has been closed to steal more information — it’s akin to having the keys to a car rather than having to smash through the window. Only when server security certificates are updated (i.e. the locks are changed) will the bad guys be foiled, and that’s going to take some time.

Big-name companies including Google, Yahoo and Dropbox are scrambling to update their systems to close the Heartbleed loophole, but the danger is far from over. Stay tuned to our lists of apps and websites that are affected for details of how to protect yourself, and follow any prompts you receive to reset your passwords from the online services you use.

[Image courtesy of Heartbleed.com / Karen Blaha]

Editors' Recommendations

David Nield
Dave is a freelance journalist from Manchester in the north-west of England. He's been writing about technology since the…
The next big Windows 11 update has a new hardware requirement
Windows 11 device sitting on a stool.

Microsoft’s upcoming Windows 11 24H2 update is expected to arrive with yet another hardware requirement. Centered around SSE4.2 or Streaming SIMD Extensions 4.2, a crucial component for modern processors, the new Windows 11 24H2 with build 26080 will only boot on CPUs that support the instruction set.

This information comes from Bob Pony on X (previously known as Twitter), following earlier reports in February where he claimed that CPUs lacking support for the POPCNT instruction were no longer compatible with Windows 11. The updated requirement is essentially the same, except that they now mandate the entire SSE 4.2 instruction set instead of just the POPCNT instruction within it, as was previously required.

Read more
How to choose the best RAM for your PC in 2024
RAM inside the Starforge Navigator.

If you want to choose the best RAM for your PC, you'll be faced with a lot of terms that may not sound familiar at a glance. DDR? DIMM? CAS? XMP? When you just want something that goes well with the rest of your PC, having to pull out a dictionary before you shop can be pretty daunting.

Fortunately, picking RAM is fairly straightforward once you understand what you're looking for and what it means. In our RAM buying guide, we'll walk you through the process so that you can be happy with your choice.
Understanding RAM
The thing about RAM is that you don't need to fully get what each and every spec is responsible for -- not unless you want to. If you're building a barebones office PC, even sub-optimal RAM will make it run; the problem is that it won't run nearly as well as it could.

Read more
This HP laptop is discounted from $519 to $279
HP 14 laptop with intel Celeron on desk.

There are laptop deals for top-of-the-line machines, but if you only need a basic device for your day-to-day needs, don't spend more than you should by taking advantage of Walmart's offer for the HP 14-inch Laptop. Instead of $519, you'll only have to pay $279 for savings of $240. That's an extremely affordable price for a brand new laptop, but we don't think it will last long. To make sure that you don't miss out on the discount, it's highly recommended that you proceed with the transaction as soon as possible.

Why you should buy the HP 14-inch Laptop
The HP 14-inch Laptop will never be able to match up to the speed of the best laptops, which is expected because of its price. However, if you're thinking about using the device for simple tasks like browsing the internet, watching streaming shows, and typing documents, then its 13th-generation Intel Core i3-N305 processor, integrated Intel UHD Graphics, and 8GB of RAM will be enough. The laptop also ships with Windows 11 Home pre-installed in its 256GB SSD, for an operating system that will be familiar for most people.

Read more