New hacking challenge shows Heartbleed is as bad as we thought

By David Nield April 12, 2014

blackberry roll heartbleed patches android ios week — Image used with permission by copyright holder

You’ll have been hearing a lot about the Heartbleed bug this week, and it’s now been confirmed that the vulnerability can be used to nab private security keys from a server. That means a rogue site could pose as a genuine one, and neither you nor your browser would be any the wiser.

A quick recap: Heartbleed allows hackers to ping vulnerable servers for all kinds of sensitive information, including email addresses, passwords and credit card numbers. At first, there was some debate about whether this information could include private SSL keys, in many ways the most valuable data for a hacker; now we have confirmation that it can.

White-hat hackers Fedor Indutny and Ilkka Mattila successfully took on the Heartbleed hacking challenge laid down by Web performance and security company CloudFlare. “We confirmed that both of these individuals have the private key and that it was obtained through Heartbleed exploits,” said CloudFlare.

Having access to these private keys means hackers can return even after the Heartbleed exploit has been closed to steal more information — it’s akin to having the keys to a car rather than having to smash through the window. Only when server security certificates are updated (i.e. the locks are changed) will the bad guys be foiled, and that’s going to take some time.

Big-name companies including Google, Yahoo and Dropbox are scrambling to update their systems to close the Heartbleed loophole, but the danger is far from over. Stay tuned to our lists of apps and websites that are affected for details of how to protect yourself, and follow any prompts you receive to reset your passwords from the online services you use.

[Image courtesy of Heartbleed.com / Karen Blaha]

Editors' Recommendations

Topics

Heartbleed Bug: Our Complete Coverage

Contributor

Dave is a freelance journalist from Manchester in the north-west of England. He's been writing about technology since the…

Computing

Does RAM speed matter for PC performance?

Installing RAM sticks in a motherboard.

RAM is one of the primary components in a PC, and it's important that you have at least a certain amount of RAM depending on what you want to do with your PC. However, there are more things to RAM than just capacity: Frequency and latency are important considerations, too.

The question of whether RAM speed matters is especially important now that we have two generations of RAM available, both DDR4 and DDR5 -- and they have vastly different speeds. The official maximum clock speed for DDR4 was 3200MHz, while DDR5 starts at 4800MHz, an increase of 50%; however, you'll easily find RAM kits reaching above 7000MHz. Although latency significantly went up, from CL14 on most 3200MHz DDR4 kits to CL40 on most 4800MHz DDR5 kits, DDR5 is still found to be faster.

Computing

The 6 best 2-in-1 laptops for drawing in 2024

Portal RTX running on the Surface Laptop Studio 2.

Whether you're a seasoned professional or enjoy drawing as a hobby, investing in a 2-in-1 laptop is a great idea for all sorts of artists. Drawing on a laptop makes it easy to quickly share your creation with others, which is especially useful if you're doing it as a professional–negating the need to upload your pen-and-paper sketch to the computer before sending it to a client. Moreover, working on a laptop lets you undo mistakes, zoom in to better handle small details, and quickly change utensils.

There are a lot of perks to drawing on a 2-in-1 laptop, but not all of them are great for creators. Some have unresponsive displays that can't register all your movements, while others might have a lackluster resolution or color spectrum that turns most images into a muddled mess. Because of that, it can be hard figuring out which laptop is best for your needs. And if you'll be spending a good chunk of change on the laptop, you'll want to make sure you get it right.

Computing

Best Buy’s deal of the day is $150 off the MacBook Air M2

A woman working on a 2023 MacBook Air with M2 chip.

For Mac lovers, Best Buy has one of the best laptop deals at the moment with $150 off the MacBook Air M2. Usually priced at $999, you can buy it for $849 right now making it great value for anyone who wants to get involved with the Apple ecosystem without breaking the bank. Stylish and speedy, this is a laptop that will suit mostly everyone from students to people working from home or commuters. Here’s what you need to know before you hit the buy button. As always with such good deals, bear in mind that you could miss out if you wait too long.

Why you should buy the MacBook Air M2
One of the best laptop brands for reliability and being high quality, buying a MacBook Air is an investment that will last. While Windows-based laptops can lose their lustre over time, MacBooks tend to keep going for longer. While the MacBook Air M2 doesn’t have the latest Apple silicon -- the M3 -- it still offers fantastic performance. The M2 chip has an 8-core CPU and 10-core GPU and this model is still considered to be the best MacBook for everyone. This particular model comes with 8GB of memory and 256GB of SSD storage which is sufficient for all everyday tasks and saving documents easily.