Skip to main content

New hacking challenge shows Heartbleed is as bad as we thought

blackberry roll heartbleed patches android ios week
Image used with permission by copyright holder

You’ll have been hearing a lot about the Heartbleed bug this week, and it’s now been confirmed that the vulnerability can be used to nab private security keys from a server. That means a rogue site could pose as a genuine one, and neither you nor your browser would be any the wiser.

A quick recap: Heartbleed allows hackers to ping vulnerable servers for all kinds of sensitive information, including email addresses, passwords and credit card numbers. At first, there was some debate about whether this information could include private SSL keys, in many ways the most valuable data for a hacker; now we have confirmation that it can.

White-hat hackers Fedor Indutny and Ilkka Mattila successfully took on the Heartbleed hacking challenge laid down by Web performance and security company CloudFlare. “We confirmed that both of these individuals have the private key and that it was obtained through Heartbleed exploits,” said CloudFlare.

Having access to these private keys means hackers can return even after the Heartbleed exploit has been closed to steal more information — it’s akin to having the keys to a car rather than having to smash through the window. Only when server security certificates are updated (i.e. the locks are changed) will the bad guys be foiled, and that’s going to take some time.

Big-name companies including Google, Yahoo and Dropbox are scrambling to update their systems to close the Heartbleed loophole, but the danger is far from over. Stay tuned to our lists of apps and websites that are affected for details of how to protect yourself, and follow any prompts you receive to reset your passwords from the online services you use.

[Image courtesy of / Karen Blaha]

Editors' Recommendations

David Nield
Dave is a freelance journalist from Manchester in the north-west of England. He's been writing about technology since the…
How to edit images with ChatGPT
Editing images in ChatGPT.

ChatGPT is constantly improving and its latest multi-modality update gives it a number of exciting features when it comes to images. It can draw, and it can edit pictures you give it — or you can have it make something and then edit that — and you can do it through words alone, or with extra materials and specifications to help it make the changes you want.

Here's how to use ChatGPT to edit images.

Read more
Some updates coming to macOS 15 aren’t just about AI
Apple's 15-inch MacBook Air on a desk, with macOS Sonoma running on its display.

Apple's Worldwide Developers Conference (WWDC) is coming up soon, and everyone's expecting a huge announcement around AI. But don't worry, according to a report from AppleInsider, there are some practical tweaks coming to macOS 15 that are in the works. Notably, the System Settings app is set to receive the biggest changes, with other menus and app UIs also expecting some rearranging.

The last update to the Settings app happened with macOS Ventura, changing the name from System Preferences to System Settings and shifting to an iOS-style design, a change that ruffled the feathers of diehard Mac users. This time, the organizational system will reportedly be based on "priority and overall importance."

Read more
Best gaming chair deals: Save on Corsair, Razer, and more
Razer - Iskur Gaming Chair.

Playing video games for hours can be pretty brutal to your back and body, especially if you're an older gamer; as such, buying yourself a purpose-made chair can certainly help keep you healthier. While gaming chairs won't compete with chairs that are made specifically to take your health into account, they do offer better padding and a more hugging feeling than you'd find with your average low-end office chair. To that end, we've gone out and found some of our favorite gaming chair deals out there to make your life a little bit easier.

That said, if you're still in the shopping phase and haven't fully built your gaming setup yet, be sure to check out these gaming PC deals, gaming monitor deals, and gaming console deals to deck yourself out with the best stuff.
Homall Massage Gaming Chair -- $80, was $170

Read more