It now has its own website..

http://heartbleed.com/

Salon has a take:
http://www.salon.com...about_heartbleed/

There are many reasons to be concerned about ÂHeartbleed,Â the catastrophic vulnerability in the InternetÂs most popular security technology that was disclosed on Tuesday. For one thing, itÂs not even clear what we, as individuals, should be doing about it. At the Atlantic, James Fallows is strongly urging that we change our passwords to our most crucial online services right now. But other experts are advising that we should wait a day or two, until potentially compromised sites have upgraded their software. Otherwise, weÂll just be handing a new password over to an already-busted security system.

ThatÂs nerve-wracking, but not quite as anxiety inducing as the speculation floated by Bruce Schneier, a longtime security analyst with impeccable credentials.

At this point, the odds are close to one that every target has had its private keys extracted by multiple intelligence agencies. The real question is whether or not someone deliberately inserted this bug into OpenSSL, and has had two years of unfettered access to everything. My guess is accident, but I have no proof.

By Âodds are close to oneÂ Schneier means that the likelihood that the Heartbleed bug has already been exploited by everyone from the NSA to to the PeopleÂs Liberation Army is close to 100 percent. But even more distressing is the notion that this might not have been an accident.

[. . .]

As does Guardian:
http://www.theguardi...usands-of-servers

Etc. ie WHAT "MISSING AIRPLANE" ??? when...

We gots a NEW mystery (of similar signal/noise) wrapped in a cynical matrix of OBVIOUS 'interested Parties', Comrade..
KGB/China/NSANSA/and others too-numerous.
Worst Case??? Hell Youse Guys are s'posed to do gedanken What-Ifs -??- in fucking Boolean Space,

Aint'cha?

Post #388,381 by Ashton 4/9/14 4:50:04 PM Reply	It now has its own website.. http://heartbleed.com/ Salon has a take: http://www.salon.com...about_heartbleed/ There are many reasons to be concerned about ÂHeartbleed,Â the catastrophic vulnerability in the InternetÂs most popular security technology that was disclosed on Tuesday. For one thing, itÂs not even clear what we, as individuals, should be doing about it. At the Atlantic, James Fallows is strongly urging that we change our passwords to our most crucial online services right now. But other experts are advising that we should wait a day or two, until potentially compromised sites have upgraded their software. Otherwise, weÂll just be handing a new password over to an already-busted security system. ThatÂs nerve-wracking, but not quite as anxiety inducing as the speculation floated by Bruce Schneier, a longtime security analyst with impeccable credentials. At this point, the odds are close to one that every target has had its private keys extracted by multiple intelligence agencies. The real question is whether or not someone deliberately inserted this bug into OpenSSL, and has had two years of unfettered access to everything. My guess is accident, but I have no proof. By Âodds are close to oneÂ Schneier means that the likelihood that the Heartbleed bug has already been exploited by everyone from the NSA to to the PeopleÂs Liberation Army is close to 100 percent. But even more distressing is the notion that this might not have been an accident. [. . .] As does Guardian: http://www.theguardi...usands-of-servers Etc. ie WHAT "MISSING AIRPLANE" ??? when... We gots a NEW mystery (of similar signal/noise) wrapped in a cynical matrix of OBVIOUS 'interested Parties', Comrade.. KGB/China/NSANSA/and others too-numerous. Worst Case??? Hell Youse Guys are s'posed to do gedanken What-Ifs -??- in fucking Boolean Space, Aint'cha?
Post #388,386 by drook 4/9/14 5:01:17 PM Reply	Most damning point IMO If the PCI guys were against it just for the high-level design, an implementation bug is the least of our worries. But it makes our site faster ... -- Drew
Post #388,394 by folkert 4/10/14 1:52:43 AM Reply	Yes... this. ^^^ -- greg@gregfolkert.net "No snowflake in an avalanche ever feels responsible." --Stanislaw Jerzy Lec

Welcome to IWETHEY!