Tuesday, April 15, 2014

Heartbleed: List of sites, showing those impacted and those not- be sure to look at this

The site mashable.com has a list of websites and companies impacted by the Heartbleed defect.  Note that popular email providers we use are impacted.  Also note that most banks are listed as not impacted.   However, I showed in a previous post that, though Chase is listed as not impacted, Chase Credit has a notice on its landing page to change your password.

Someone asked me today why they should be concerned about, say Facebook, since they said there was no information of concern there.  The answer has to do with the way many create passwords for different sites:  they don't.  The same password is used for most sites.  One of the first procedures a crook will use when he gets a possible password is to electronically visit many, many sites and see if the same password works for any of those sites.  More often than not, because people use the same password for most of their logons, the crooks will gain access to many sites, including ones that do have private information.

No comments:

Post a Comment

Printfriendly

Print Friendly and PDF