Advertisement

We need your help now

Support from readers like you keeps The Journal open.

You are visiting us because we have something you value. Independent, unbiased news that tells the truth. Advertising revenue goes some way to support our mission, but this year it has not been enough.

If you've seen value in our reporting, please contribute what you can, so we can continue to produce accurate and meaningful journalism. For everyone who needs it.

heartbleed.com

'Heartbleed' security bug leaves encrypted web servers at risk

The bug can reveal the contents of a server’s memory – where sensitive data like usernames, passwords and credit card numbers is stored – and allows attackers to steal info without a trace.

MILLIONS OF WEB servers worldwide have a software flaw which lets attackers access the security keys used to secure online commerce and web connections.

The bug, named Heartbleed, is in open source software called OpenSSL which is widely used to encrypt web communications. The bug can reveal the contents of a server’s memory - where sensitive data like usernames, passwords and credit card numbers is stored.

It allows attackers to eavesdrop on communications, steal data directly from the servers and users and to impersonate services and users. The bug was discovered by a team of security engineers at Codenomicon and Google Security researcher Neel Metha, who first reported it to the OpenSSL team.

It is unclear how widespread the bug is since attackers leave no trace, something the team of security engineers confirmed when they tested the bug by attacking their own services.

We have tested some of our own services from attacker’s perspective. We attacked ourselves from outside, without leaving a trace. Without using any privileged information or credentials we were able steal from ourselves the secret keys used for our X.509 certificates, user names and passwords, instant messages, emails and business critical documents and communication.

According to the researchers who discovered the bug, the bug has been present in version of OpenSSL for two years and the latest version, which was released on 7th April, is no longer vulnerable to the bug.

Another developer has published a tool which lets people check websites for Heartbleed vulnerability. Major sites like Facebook, Twitter, Amazon and Google are not affected by the bug, but others like Yahoo and OkCupid are still vulnerable.

Read: This huge security flaw affects (nearly) all iPhones, iPads, and Apple computers >

Read: Security flaw on Android version of WhatsApp could leave user chats exposed >

Readers like you are keeping these stories free for everyone...
A mix of advertising and supporting contributions helps keep paywalls away from valuable information like this article. Over 5,000 readers like you have already stepped up and support us with a monthly payment or a once-off donation.

Close
9 Comments
    Install the app to use these features.
    Mute Brian Lenehan
    Favourite Brian Lenehan
    Report
    Jul 19th 2017, 6:38 AM

    Falling asleep when driving home after a weekend away, I’d say, is a big factor. Easy to do on those long and monotonous motorways.

    22
    Install the app to use these features.
    Mute Martin Byrne
    Favourite Martin Byrne
    Report
    Jul 19th 2017, 7:46 AM

    @Brian Lenehan: indeed – sooner the better we have autonomous vehicles

    11
    Install the app to use these features.
    Mute prop joe
    Favourite prop joe
    Report
    Jul 19th 2017, 7:13 AM

    Any indication on weather conditions or type of road at the time of accidents? Judging by some of the comments about cyclists it’s not a surprise the amount of deaths increased. A lot of luns driving out there, would love to see some persecutions for drivers turning left cutting off cyclists. See it all the time but nothing is done about it.

    13
    Install the app to use these features.
    Mute Stephen
    Favourite Stephen
    Report
    Jul 19th 2017, 12:45 PM

    Can the stats show what % of crashes are drink related over the weekend. Why not push for the lower alcohol level from Fri-Mon vs letting a free vote on the new road safety bill. Age profile of deaths? Distance being travelled? (Tired drivers).Drug use (legal and illegal). Age of car and tires? Last time road was resurfaced? Car speed at time of accident vs recommended speed in weather conditions? Any phone use element in crash

    5
    Install the app to use these features.
    Mute Michael Doyle
    Favourite Michael Doyle
    Report
    Jul 19th 2017, 8:21 AM

    Since when is 14 percent ‘most’?

    3
    Install the app to use these features.
    Mute Nick Allen
    Favourite Nick Allen
    Report
    Jul 19th 2017, 9:11 AM

    @Michael Doyle:

    Where is 14% referenced in the article?

    1
    Install the app to use these features.
    Mute Alex Gibson
    Favourite Alex Gibson
    Report
    Jul 19th 2017, 10:50 AM

    @Nick Allen: the article headline says “most” accidents happen between 2-4pm. But when looking at the statistics reported only 11 of 72 recorded fatalities happen in this time period…..they do use the correct terminology in the body of the article.

    2
    See 2 more replies ▾
    Install the app to use these features.
    Mute Nick Allen
    Favourite Nick Allen
    Report
    Jul 19th 2017, 11:05 AM

    @Alex Gibson:

    The ‘Most’ in the heading is correct. It is the most compared to the other time frames in the study. It is not referring to most being greater than 50%, it is a comparative analysis

    2
    Install the app to use these features.
    Mute Nick Allen
    Favourite Nick Allen
    Report
    Jul 19th 2017, 11:19 AM

    @Nick Allen:

    That said, I do take your point that if the headline is considered without the details in the article it would be misleading

    1
    Install the app to use these features.
    Mute Missyb211
    Favourite Missyb211
    Report
    Jul 19th 2017, 9:54 AM

    What’s all this analysis good for? Basically people can get killed on the roads any day and at any time! But in case all this data can help one not get killed, the best times of day to be on the roads are between 6- 2pm, 4-6 and 8-12! Analyse that. No disrespect to anyone who has lost loved ones!

    2
    Install the app to use these features.
    Mute Nick Allen
    Favourite Nick Allen
    Report
    Jul 19th 2017, 10:45 AM

    @Missyb211:

    Maybe these data could help the Gardai with targeting speed checks on our roads or when safety advertisement campaigns are run

    2
    Install the app to use these features.
    Mute Scundered
    Favourite Scundered
    Report
    Jul 19th 2017, 7:37 AM

    Maybe a few hungover heads on the Sunday stats?

    4
    Install the app to use these features.
    Mute John O'Shea
    Favourite John O'Shea
    Report
    Jul 19th 2017, 6:30 PM

    With this statistic in mind and previous legislation as precedent, those found to be holding or looking at a clock whilst in driving a motorised vehicle are subject to 6 penalty points and an €80 fine.

    1
    Install the app to use these features.
    Mute Richard Casey
    Favourite Richard Casey
    Report
    Jul 19th 2017, 8:46 AM

    Sunday sees a lot of old folk out for a spin causing tailbacks on the road, any connection?

    1
Submit a report
Please help us understand how this comment violates our community guidelines.
Thank you for the feedback
Your feedback has been sent to our team for review.
JournalTv
News in 60 seconds