Skip to main content

OpenSSL - HeartBleed Vulnerability

Since HeartBleed vulnerability has been announced on April 7, almost all projects have rush to check how much their system is affected by it. Since it is a major vulnerability for OpenSSL, more or less some fallacies in each project exist.  This means that systems and data of their big amount of customers are in danger. That is why all users are waiting for a patch or a new release to avoid any attack related to this bug.

What is this vulnerability? What does it cause?
It is named as HeartBleed (CVE-2014-0160). It enables an attacker to steal keys used for communication establishment, passwords and process memory. Because it is hard to detect, SaaS providers and more couldn't ensure customers that such attack has not happened so far.

What is recommended to protect your data?
  • Check for updates of projects, if they are using openssl library. Update them immediately or apply patches. 
  • Upgrade openssl library in your servers to latest version.
  • Change your passwords.
  • Regenerate your key pairs and update your public key on servers.
Even though it is claimed that ssh is not affected by this vulnerability, it may be a good choice to update keys.

Check your servers to see if they are vulnerable with this code.

Companies immediately have dug into work for updates or patch. Here is blog posts of 2 popular sites:
Labels:
Location: Türkiye

Comments

Post a Comment

Popular posts from this blog

Integration of MuPDF Project as a Library into an Android Studio Project

I have needed to use MuPDF library in my android project. After some research, I have seen that there are many integration tutorials but, but integrated projects are developed on Eclipse. For projects on AndroidStudio+Gradle, there is no example. I mean there is no specific example which exactly refers to this issue. So, after achieving my goal, I want to share the steps publicly so that it can be reused by others.
27 comments
Read more

A Way To Monetize Your Kivy Game

While I am building my game, I look for a way to monetize it. This will be my first game, so it is also the first to attempt earning money with an App. I am also not familiar to monetization companies. So, I have done a search to find an appropriate ads network which can be easily integrated with kivy . The first and only company who provides a sdk for kivy is RevMob . I integrated RevMob sdk and tested it. Unfortunately, it doesn't have a good performance and FullScreen Ads crashes. Just links will work. Therefore, RevMob option is not really preferable since ads need to be visually effective. You can also integrate android sdk of any ads network by using pyjnius . In this post, I will show how to use Adbuddiz sdk with kivy.
6 comments
Read more

Encoding multi-dimensional value into 1-D with preserving closeness

After a very long time, this will be my first post. I hope that it will not be the last, and the rest will come. For a project about taxi trajectory prediction, I have applied k-NN algorithm on coordinate sequence of taxi trips. Did I have promising results? Well, it is arguable, but I have discovered some good techniques. One of them is Z-order curve (Figure 1). Figure 1: Four levels of Z-ordering (taken from Wikipedia  page) I was looking for a technique to decrease dimensionality of 2-D coordinate representation (lat-lon) into 1-D . But on this 1-D value, I would like to apply k-NN algorithm. For this purpose, 1-D values must preserve the closeness of two different coordinates. If I do linear ordering of latitude and longitude values, I couldn't achieve this goal, because closeness will depend on only one value which is placed on the right-most. Let's assume I do linear ordering as lat-lon:
11 comments
Read more