Change Your Passwords

dogmaryxx

ciderboy2009 wrote: »

If you use Lastpass then login to their web site and choose the security scan option. It'll go through all of the sites you've got info stored for and tell you which (if any) are affected and what you should do for each one.

For 817 sites on mine only 4 are potentially affected.

Don't forget to change the Lastpass password

RumRat

dogmaryxx wrote: »

Don't forget to change the Lastpass password

It says, there is no need to change lastpass password in that article.

Inigo_Montoya

I tested a few sites - so for i have found gumtree is vulnerable

http://filippo.io/Heartbleed/ - this test is a bit unrelaible as often it comes back with 'something went wrong' - for example it seems quite hard to repeat the gumtree is vulnerable report

So if a website comes back with 'soemthing went wrong' do not assume it is not vulnerable

RumRat

Its reporting
All good, https://www.gumtree.com seems fixed or unaffected!

Inigo_Montoya

RumRat wrote: »

Its reporting
All good, https://www.gumtree.com seems fixed or unaffected!

yes I get that too with that URL

About 1 hour ago it said is was vulnerable but I was logged in & using a secure https my.gumtree.com URL

Have you tried logging in and trying https://my.gumtree.com/manage-account instead

FOREVER21

wigglebeena wrote: »

You can test here. https://www.ssllabs.com/ssltest/index.html

What banks are safe? Why are none of them making any reference or announcement on their sites?

Just received an e- mail fromCoventry Building Society saying their site is safe.

dogmaryxx

RumRat wrote: »

It says, there is no need to change lastpass password in that article.

We'll keep updating the list as new information comes in.

Now it does.

bobblebob

No need to panic over this. All the banking websites ive seen dont have the exploit anyway.

And remember this has been exploitable for 2 years now. Chances are if anyone was exploiting it on a mass scale we would know about it by now

RumRat

Inigo_Montoya wrote: »

yes I get that too with that URL

About 1 hour ago it said is was vulnerable but I was logged in & using a secure https my.gumtree.com URL

Have you tried logging in and trying https://my.gumtree.com/manage-account instead

I think the site only deals with the main URLs.
This site https://www.ssllabs.com/ssltest/, however, does check that full address. (it passes)

RumRat

bobblebob wrote: »

No need to panic over this. All the banking websites ive seen dont have the exploit anyway.

And remember this has been exploitable for 2 years now. Chances are if anyone was exploiting it on a mass scale we would know about it by now

Exactly and despite all the publicity there are no reports of anyone being hacked due to Heartbleed, as far as I know. The point of the publicity was to inform of the vulnerability, most of the main players seemed to have fixed or were unaffected.