Time to change those passwords...

A new bug has been discovered on the internet, called the Heartbleed Bug. The basic idea is that it allowed hackers to steal information from servers that you thought were protected behind a secure (https) connection. That information could include usernames, passwords, credit card information, or anything that you've submitted in a form. Over 2/3 of the servers on the internet use OpenSSL which is the library that this bug was found in.

Subeta is safe. We're fortunate to be protected by cloudflare who was alerted to this bug a week before it became public, and has already patched it. It's very unlikely that any of your information has been stolen from Subeta.

Unfortunately there are a lot of sites that hadn't fixed their implemention of openSSL when the information was made public. This includes some google services, yahoo mail, imgur, and other sites that most of us use daily.

It's our suggestion that you change your passwords everywhere, including Subeta. Before you change your password on a website, check it here to ensure that it's no longer a threat. If you change your password and the site is still unsafe, you could be submitting your password to hackers again!

OpenSSL put out a patch as soon as the bug was made public, and most sites have already begun to patch and fix their servers. Most major sites on the internet have already been patched. You can read more about the bug here. Thank you, and stay safe on the internet! :heart:

Here is another great writeup of this bug.

Posted by Keith

04/9/14 9:10 pm Leave Comment

MOKONA 04/11/14 11:32 am

sigh So many passwords to change. But about time too anyway, haven't edited them in a while...

Thank you for us about it Keith! :D:D

Jazmine 04/10/14 6:15 pm

Another article about the subject I found on a local TV station 's website

Bliss 04/10/14 2:56 pm

Thanks for the heads up!

Wings_In_Poetry 04/10/14 2:38 pm

Thanks so much for this!

Rii 04/10/14 1:56 pm

I saw that on Facebook...already changing my gmail passwords. I was worried about Subeta but I'm glad to know it's already patched. Just gotta think of a unique password to replace the old one I won't forget...

Thanks for the reminder!

DarkVixen28 04/10/14 9:43 am

I don't even know all what sites I belong to anymore...o.O'
New goal! To keep a little account journal squirreled away somewhere so I know what accounts I have when things like this happen.

bulleta 04/10/14 9:04 am

Luckily I don't visit a lot of sites
My mom, however, is online shopping queen
fucking shit

pumpkins 04/10/14 8:48 am

For Chromeusers, there's also the Chromebleed extension that you can get, which warns you if a site you've visited has been affected :)

~~Sianach~~ 04/10/14 8:05 am

Thanks for letting us know, Keith. I'm really grateful that you take the time to do this for us. (:

LOUD 04/10/14 7:49 am

Thank you for the infos.

Rowan 04/10/14 7:41 am

Thanks for the reminder bro.

Trees 04/10/14 7:26 am

I don't really want to change my passwords cause I'll most likely forget...most of the sites I use are apparently safe anyway...

The_Rasmus 04/10/14 7:03 am

Thank you so much for letting us know!!

Lyric 04/10/14 6:38 am

After reading conflicting posts from users can we get an official update clarifying the changing of passwords or waiting?

lull 04/10/14 5:34 am

Thank you Keith. I'd never know bout stuff like this if you didn't bring it to our attention hugs

wild_jester 04/10/14 5:18 am

O_O thank you for this info

Ghini 04/10/14 3:24 am

Wow o.o thanks for the heads up. It will take... a few weeks at least for me to remember all the sites I have accounts on o_O It must be over 100, and some I haven't logged into in months or years. I guess a lot of those aren't really important so if they get hacked, hopefully there aren't really bad consequences.

Takks 04/10/14 3:14 am

Thanks for letting us know!

Eiji 04/10/14 1:50 am

Thank you very much for the information, Keith!

Merlin 04/10/14 12:53 am

I hadn't even heard about this. crazy

L0stS0ul 04/10/14 12:47 am

I heared on the radio that the leak has been existing for the past two years.
So I dunno, if hackers wanted to steal anything, they had two years to do it

Finnie 04/10/14 12:34 am

@Noelle & FCOD

I believe if a website is listed as "no SSL" it means it's using a different protocol other than SSL for its server security.

operationivy 04/9/14 11:58 pm

Bad, bad news for everyone of course. I changed my password here and I'm changing all my passwords and other information all over the internet.

BULLET 04/9/14 11:51 pm

I appreciate the warning and update. :)

Noelle 04/9/14 11:47 pm

Silly question. If a site says it has no SSL does that mean it is vulnerable and that I should still change my password on those particular sites?

Chef 04/9/14 11:43 pm

Thank you for this. I was going back and forth as to if I wanted to change everything, which is A LOT, and after reading this, I'm working on doing that right now!

~~Kilala~~ 04/9/14 11:33 pm

Thank you so much for this information, Keith! I am about to change every single PW I have on all the sites I visit, which thankfully isn't too many XD.

~~TJPanda~~ 04/9/14 11:28 pm

Thank you Keith for the update. I'm glad to hear the site is safe.
I wasn't aware of what was going on until I saw this news post ^_^.

8=8 04/9/14 11:27 pm

Thanks for the headsup :heart:

LunaWolf 04/9/14 11:11 pm

Thank you for the notice, I was wondering why in the last week i have been having a major issue on my laptop and had to keep running scans and cleaning up daily

FCoD 04/9/14 11:07 pm

Just a question that I don't understand, using @Jazzy's link to the list of sites what about the ones that say no SSL, are they vulnerable or not?

Sorry if that seems dumb. :)

Also thanks for the heads up.

Targaryen 04/9/14 11:07 pm

Thanks for telling us and where to check! Glad Yahoo and Google is patched!

Alenwen 04/9/14 11:02 pm

I heard this on the radio yesterday D;
Thanks for providing all the information!

amethyst227 04/9/14 11:00 pm

Thank you so much for the info.

Shamte 04/9/14 10:47 pm

Thanks so much for notifying us! I had no idea this was even happening. ):

QueenOfImladris 04/9/14 10:35 pm

Well...just changed all the main ones, I'll do the rest as I remember them.
I'm on so many sites (a lot of which I don't even visit monthly, let alone daily) that it'd be impossible to do them all in one evening.
<_<
Thanks for that link to test the sites, it'd suck changing it just to have to change it again days later.

Anberlin 04/9/14 10:27 pm

It's really good to see so many sites taking this seriously.

techn0witch 04/9/14 10:24 pm

Virus, check using the link provided. :u

Zay 04/9/14 10:24 pm

Thanks for letting everyone know, I know there were at least a few users who weren't aware of the situation!
Thank you for keeping everyone in the loop!

~~foxette~~ 04/9/14 10:23 pm

This is scary stuff. Bravo Subeta for being on top of it!

Damon 04/9/14 10:22 pm

Does anyone know if paypal is safe?

Pagan 04/9/14 10:20 pm

I continue to be impressed and more impressed by Subeta's proactive ethics and communications. Thank you all. Feeling safe, and feeling like someone is keeping an eye on these issues and promptly and clearly addressing them is such a pleasant change for me!

honey_bear 04/9/14 10:20 pm

@Finnie Ah, ok. Thanks for the clarification. Appreciate it :). And thanks @Keith for posting about this. :)

azazel 04/9/14 10:20 pm

Thanks for alerting people about this. I'm sure there were/are quite a few who were not aware.

Lisa 04/9/14 10:19 pm

Okay, changed everything. Except my Apple/iTunes password...should I change that one too? I don't know if that would be included...

Robin 04/9/14 10:15 pm

That's hella scary.
Thank you so much for warning the people who weren't aware of this, I really appreciate it.

Sirensong 04/9/14 10:11 pm

I've been following this story too and was very pleased too see that when I checked Subeta was listed as safe. The site my hubby spends all his time on isn't.

Hyena 04/9/14 10:05 pm

Oh blergh. Thanks for the warning!

sikkykins 04/9/14 10:02 pm

this suuuucks. the news says it's found hundreds of yahoo usernames and passwords. (i am a frequent yahoo user too.) what a pain. :| thanks for the heads up. luckily i never put out card/address info online i suppose...

Finnie 04/9/14 10:00 pm

@Lisa

You should honestly be changing your passwords every few months anyway, it's just good practice.

Leave Comment

Comments are currently on a short cache, meaning your comment may take a few minutes to show up after you post it.