Heads up ; Heartbleed Bug: Public urged to reset all passwords

[Anonymous]

Heartbleed Bug: Public urged to reset all passwords

Source ; BBC news

http://www.bbc.co.uk/news/technology-26954540

[anticpated]

The most effective method for password encryption to my knowledge is "salting". 

[Edited for the sakeof readability]

OK that was off the top of my head, sorry ,my inner-geek is very present tonight.

[jonsie]

Hells teeth, you need a degree in maths and the brain of Einstein to set a password these days!

[Anonymous]

Agreed.

[anticpated]

What I am saying it's the responsibility of the security provider not that of the user to set complex password combinations. That was very rough PHP code, as the actual code needed to do that would be a bit longer. 

The bug in OpenSSL should have been fixed before now although I randomly generate or create my passwords....it means I have to refer to them sometimes.

[gemz4the1]

I don't know why websites ask for security answers when setting up accounts or mobile/other email details to contact if there are issues signing in because, in my experience, 9 times out of 10 they don't use them. 

Don't get me started on setting passwords.  You should be able to use the password you want, but instead you're told it has to have upper case, lower case, numbers, symbols, etc.  Some websites will also stop you from using a previous password that you have had less than 6-12 months ago.

[Anonymous]

Using such connotations are there to increase password strength.

You'd be surprised how many people use the same password for many sites and also use options such as date of birth.

[Anonymous]

You could always try the 'banana' method !

http://www.bbc.co.uk/news/blogs-magazine-monitor-26969276

[Anonymous]

Update ; A 19-year-old Canadian became the first person to be arrested in relation to the Heartbleed security breach.



http://www.bbc.co.uk/news/technology-27058143