Time to change those passwords...

A new bug has been discovered on the internet, called the Heartbleed Bug. The basic idea is that it allowed hackers to steal information from servers that you thought were protected behind a secure (https) connection. That information could include usernames, passwords, credit card information, or anything that you've submitted in a form. Over 2/3 of the servers on the internet use OpenSSL which is the library that this bug was found in.

Subeta is safe. We're fortunate to be protected by cloudflare who was alerted to this bug a week before it became public, and has already patched it. It's very unlikely that any of your information has been stolen from Subeta.

Unfortunately there are a lot of sites that hadn't fixed their implemention of openSSL when the information was made public. This includes some google services, yahoo mail, imgur, and other sites that most of us use daily.

It's our suggestion that you change your passwords everywhere, including Subeta. Before you change your password on a website, check it here to ensure that it's no longer a threat. If you change your password and the site is still unsafe, you could be submitting your password to hackers again!

OpenSSL put out a patch as soon as the bug was made public, and most sites have already begun to patch and fix their servers. Most major sites on the internet have already been patched. You can read more about the bug here. Thank you, and stay safe on the internet! :heart:

Here is another great writeup of this bug.

Posted by Keith

04/9/14 9:10 pm Leave Comment

Load this on 🆕 Kumos site

MOKONA 04/11/14 11:32 am

sigh So many passwords to change. But about time too anyway, haven't edited them in a while...

Thank you for us about it Keith! :D:D

Jazmine 04/10/14 6:15 pm

Another article about the subject I found on a local TV station 's website

Bliss 04/10/14 2:56 pm

Thanks for the heads up!

Wings_In_Poetry 04/10/14 2:38 pm

Thanks so much for this!

Rii 04/10/14 1:56 pm

I saw that on Facebook...already changing my gmail passwords. I was worried about Subeta but I'm glad to know it's already patched. Just gotta think of a unique password to replace the old one I won't forget...

Thanks for the reminder!

DarkVixen28 04/10/14 9:43 am

I don't even know all what sites I belong to anymore...o.O'
New goal! To keep a little account journal squirreled away somewhere so I know what accounts I have when things like this happen.

bulleta 04/10/14 9:04 am

Luckily I don't visit a lot of sites
My mom, however, is online shopping queen
fucking shit

pumpkins 04/10/14 8:48 am

For Chromeusers, there's also the Chromebleed extension that you can get, which warns you if a site you've visited has been affected :)

~~Sianach~~ 04/10/14 8:05 am

Thanks for letting us know, Keith. I'm really grateful that you take the time to do this for us. (:

LOUD 04/10/14 7:49 am

Thank you for the infos.

Rowan 04/10/14 7:41 am

Thanks for the reminder bro.

Trees 04/10/14 7:26 am

I don't really want to change my passwords cause I'll most likely forget...most of the sites I use are apparently safe anyway...

The_Rasmus 04/10/14 7:03 am

Thank you so much for letting us know!!

Lyric 04/10/14 6:38 am

After reading conflicting posts from users can we get an official update clarifying the changing of passwords or waiting?

lull 04/10/14 5:34 am

Thank you Keith. I'd never know bout stuff like this if you didn't bring it to our attention hugs

wild_jester 04/10/14 5:18 am

O_O thank you for this info

Ghini 04/10/14 3:24 am

Wow o.o thanks for the heads up. It will take... a few weeks at least for me to remember all the sites I have accounts on o_O It must be over 100, and some I haven't logged into in months or years. I guess a lot of those aren't really important so if they get hacked, hopefully there aren't really bad consequences.

Takks 04/10/14 3:14 am

Thanks for letting us know!

Eiji 04/10/14 1:50 am

Thank you very much for the information, Keith!

Merlin 04/10/14 12:53 am

I hadn't even heard about this. crazy

L0stS0ul 04/10/14 12:47 am

I heared on the radio that the leak has been existing for the past two years.
So I dunno, if hackers wanted to steal anything, they had two years to do it

Finnie 04/10/14 12:34 am

@Noelle & FCOD

I believe if a website is listed as "no SSL" it means it's using a different protocol other than SSL for its server security.

operationivy 04/9/14 11:58 pm

Bad, bad news for everyone of course. I changed my password here and I'm changing all my passwords and other information all over the internet.

BULLET 04/9/14 11:51 pm

I appreciate the warning and update. :)

Noelle 04/9/14 11:47 pm

Silly question. If a site says it has no SSL does that mean it is vulnerable and that I should still change my password on those particular sites?

Chef 04/9/14 11:43 pm

Thank you for this. I was going back and forth as to if I wanted to change everything, which is A LOT, and after reading this, I'm working on doing that right now!

~~Kilala~~ 04/9/14 11:33 pm

Thank you so much for this information, Keith! I am about to change every single PW I have on all the sites I visit, which thankfully isn't too many XD.

~~TJPanda~~ 04/9/14 11:28 pm

Thank you Keith for the update. I'm glad to hear the site is safe.
I wasn't aware of what was going on until I saw this news post ^_^.

8=8 04/9/14 11:27 pm

Thanks for the headsup :heart:

LunaWolf 04/9/14 11:11 pm

Thank you for the notice, I was wondering why in the last week i have been having a major issue on my laptop and had to keep running scans and cleaning up daily

FCoD 04/9/14 11:07 pm

Just a question that I don't understand, using @Jazzy's link to the list of sites what about the ones that say no SSL, are they vulnerable or not?

Sorry if that seems dumb. :)

Also thanks for the heads up.

Targaryen 04/9/14 11:07 pm

Thanks for telling us and where to check! Glad Yahoo and Google is patched!

Alenwen 04/9/14 11:02 pm

I heard this on the radio yesterday D;
Thanks for providing all the information!

amethyst227 04/9/14 11:00 pm

Thank you so much for the info.

Shamte 04/9/14 10:47 pm

Thanks so much for notifying us! I had no idea this was even happening. ):

QueenOfImladris 04/9/14 10:35 pm

Well...just changed all the main ones, I'll do the rest as I remember them.
I'm on so many sites (a lot of which I don't even visit monthly, let alone daily) that it'd be impossible to do them all in one evening.
<_<
Thanks for that link to test the sites, it'd suck changing it just to have to change it again days later.

Anberlin 04/9/14 10:27 pm

It's really good to see so many sites taking this seriously.

techn0witch 04/9/14 10:24 pm

Virus, check using the link provided. :u

Zay 04/9/14 10:24 pm

Thanks for letting everyone know, I know there were at least a few users who weren't aware of the situation!
Thank you for keeping everyone in the loop!

~~foxette~~ 04/9/14 10:23 pm

This is scary stuff. Bravo Subeta for being on top of it!

Damon 04/9/14 10:22 pm

Does anyone know if paypal is safe?

Pagan 04/9/14 10:20 pm

I continue to be impressed and more impressed by Subeta's proactive ethics and communications. Thank you all. Feeling safe, and feeling like someone is keeping an eye on these issues and promptly and clearly addressing them is such a pleasant change for me!

honey_bear 04/9/14 10:20 pm

@Finnie Ah, ok. Thanks for the clarification. Appreciate it :). And thanks @Keith for posting about this. :)

azazel 04/9/14 10:20 pm

Thanks for alerting people about this. I'm sure there were/are quite a few who were not aware.

Lisa 04/9/14 10:19 pm

Okay, changed everything. Except my Apple/iTunes password...should I change that one too? I don't know if that would be included...

Robin 04/9/14 10:15 pm

That's hella scary.
Thank you so much for warning the people who weren't aware of this, I really appreciate it.

Sirensong 04/9/14 10:11 pm

I've been following this story too and was very pleased too see that when I checked Subeta was listed as safe. The site my hubby spends all his time on isn't.

Hyena 04/9/14 10:05 pm

Oh blergh. Thanks for the warning!

sikkykins 04/9/14 10:02 pm

this suuuucks. the news says it's found hundreds of yahoo usernames and passwords. (i am a frequent yahoo user too.) what a pain. :| thanks for the heads up. luckily i never put out card/address info online i suppose...

Finnie 04/9/14 10:00 pm

@Lisa

You should honestly be changing your passwords every few months anyway, it's just good practice.

Tardis 04/9/14 9:57 pm

Thank you for the heads up Keith. I heard about this not too long ago via the Current Events thread. Huge sigh of relief that subeta and facebook are safe. I guess that's one good reason to be poor. I can't afford to buy anything.

Nostalgia_507 04/9/14 9:55 pm

Wow, @Keith, thanks for warning us! I hadn't heard about this latest bug exploit. busily changing all her passwords

Frankenchokies 04/9/14 9:53 pm

@Keith

The grammar suggests it is not. So my bad or your bad? OR IS IT SATAN'S BAD?

Wait, what.

Keith STAFF 04/9/14 9:52 pm

@Frankenchokies Obviously hypothetical.

Lisa 04/9/14 9:48 pm

Should I change my passwords on everything? Really? My bank, iTunes, Comcast, tumblr, deviantart...all of those? That's such a pain in the butt. I just now got them memorized and now I'm going to have to do it all again. I hate hackers. So, so much. -_-

Finnie 04/9/14 9:42 pm

@honey_bear

As Keith stated in announcement, once the websites you use have cleared the heartbleed test (once the site has been confirmed as patched), it is safe to change your passwords :)

honey_bear 04/9/14 9:40 pm

@Finnie , I'm just a little confused by your comment post. Are you suggesting we change our passwords before or after the patch you mentioned. Sorry, just a little confused. Thanks :)

DreamsInPink 04/9/14 9:36 pm

So, if Subeta is safe, why do we need to change our PWs??

Victim 04/9/14 9:35 pm

Thanks for the heads up! I haven't heard anything about this, so I really appreciate the info!

Jazmine 04/9/14 9:34 pm

Information about the sites affected:
Master list of sites affected by Heartbleed.
A more in depth article about the situation

Orgasmic that should answer your questions :)

Taters 04/9/14 9:33 pm

My mom is in web security and said that the issue was that only one of the many versions of ssl had the problem. But unless you own the site you cant really know which use it unless you know where to look. That website is the one they used in her office, and most things relating to banking are safe as they do check those things daily.
Plus, it was an update to the ssl that had the biggest problem, and most places dont get those that quick.

So just be safe and use different pws on sites relating to your money, and even change your pin here if your worried :)

But its awesome subeta cares so much about us and wanted to warn those whose parents dont work with these things on a daily basis lol

Ambition 04/9/14 9:31 pm

thank you so much for looking out for us and being on top of security issues! :D

Yelan 04/9/14 9:31 pm

Thank you so much for telling us this.

orgasmic 04/9/14 9:29 pm

Yeah I'm not understanding how to look at the websites I use to see if they're under threat or not.

deadly 04/9/14 9:28 pm

do you recommend we change ALL our passwords? email, banking, social networking, ect?

red5luke 04/9/14 9:27 pm

The company I work for got right on this for our website (which is good, because I've been answering a lot of emails about it today). I was wondering if Subeta was on top of it as well, and I'm glad to hear you guys are!

Gem_840 04/9/14 9:25 pm

Thank you for letting us know how Subeta is handling this situation! I have been following it, and was wondering about the situation here.

poppet 04/9/14 9:23 pm

I'm so amused that CloudFlare was good for something!

Keith STAFF 04/9/14 9:22 pm

@Virus Yup :)

Frankenchokies 04/9/14 9:22 pm

@Keith

Did you seriously just expose InSaNe's password or are you being hypothetical?

Damon 04/9/14 9:21 pm

So Subeta is safe right, if we need to change anything it's alright to do so?

pax 04/9/14 9:19 pm

Thank you for the announcement. This is something that has to be disseminated to people as quickly as possible.
We've rolled out Fixed OpenSSL in a server I assist in running, the other day.
(And before someone lurches at me for my grammar, English is my third language. :P)

Keith STAFF 04/9/14 9:19 pm

@Finnie Thank you! I was looking for that link, going to add it to the news post.

Keith STAFF 04/9/14 9:19 pm

@InSaNe Someone who noticed that your Subeta password is the same as your paypal password.

~~Grey_503~~ 04/9/14 9:16 pm

is paypal safe?

Finnie 04/9/14 9:16 pm

Until this afternoon subeta was coming up as being vulnerable on the heartbleed tester --- http://filippo.io/Heartbleed/

Most techs are recommending not to change your passwords at this point because the more recently your password (or other information) has been logged in the server the more vulnerable it is to hackers.

However I believe once the patches have been made you no longer have to worry about that, and yes, you should change your passwords.

InSaNe 04/9/14 9:16 pm

who would want to hack my subeta account anyway

Aspirati 04/9/14 9:15 pm

thanks for the heads up :)

Rue 04/9/14 9:15 pm

Thanks for the heads up!
This is scary ;0;

what 04/9/14 9:14 pm

really appreciate the information.

saranghae 04/9/14 9:14 pm

Thank you for letting us know! Very scary for those of is (like me) who use the web a LOT and to do a LOT of things.

SexyFart 04/9/14 9:14 pm

Thank you for the heads up! Glad to know subeta is safe. :D

_blackwolf_2009_ 04/9/14 9:13 pm

Thanks for the update. I been seeing this around but glad that this website still gives out info like this.

Owl 04/9/14 9:12 pm

Thanks for letting us know about this.

Frankenchokies 04/9/14 9:12 pm

Your grammar is shocking.

Lyllytas 04/9/14 9:12 pm

Thanks for the heads up!

Damon 04/9/14 9:11 pm

Scared the crap out of me for a moment.... but so glad Subeta is safe. Thank you for the heads up. Had been hearing around this all day. Hope it gets fixed and fast.

Leave Comment

Comments are currently on a short cache, meaning your comment may take a few minutes to show up after you post it.