BitShares Forum

Other => Graveyard => Keyhotee => Topic started by: Brekyrself on April 09, 2014, 07:03:17 pm

Title: Heartbleed SSL
Post by: Brekyrself on April 09, 2014, 07:03:17 pm
Using the example in the Keyhotee introduction video such as shopping at amazon, would Keyhotee have the same heartbleed vulnerability?
Title: Re: Heartbleed SSL
Post by: JA on April 09, 2014, 07:55:45 pm
Using the example in the Keyhotee introduction video such as shopping at amazon, would Keyhotee have the same heartbleed vulnerability?
AKAIK Keyhotee doesn't encrypt http traffic so no

But if a site is compromised and the Browsers would be hijacked, with Keyhotee, you would notice it  :D
Title: Re: Heartbleed SSL
Post by: santaclause102 on April 09, 2014, 08:48:39 pm
http://techcrunch.com/2014/04/09/what-bitcoin-users-need-to-know-about-heartbleed/

Quote
In short, update everything that touches your bitcoin and don’t trust exchanges that haven’t explicitly explained their position on the exploit. Want more bad news? You should assume that all your usernames and passwords used over the past two years are compromised. This means you should change everything, not just your bitcoin data. A clever hacker could socially engineer her way into your wallet simply by knowing a few things about your online habits.
Title: Re: Heartbleed SSL
Post by: fuzzy on April 16, 2014, 07:07:42 am
http://techcrunch.com/2014/04/09/what-bitcoin-users-need-to-know-about-heartbleed/

Quote
In short, update everything that touches your bitcoin and don’t trust exchanges that haven’t explicitly explained their position on the exploit. Want more bad news? You should assume that all your usernames and passwords used over the past two years are compromised. This means you should change everything, not just your bitcoin data. A clever hacker could socially engineer her way into your wallet simply by knowing a few things about your online habits.

Can one simply "change" their wallet Password?  Sounds like an ignorant question, but definitely interested here...