Wilson County News
Consumer Updates blog header
Wilson County News • 1012 C St • Floresville • TX • 78114 • Ph: 830-216-4519 • Fax: 830-393-3219 • Email:
Wednesday, Jul 30, 2014
Login
Not a subscriber? Click here.
Are you a WCN subscriber?
Set up your password.

 
E-Mail
Password
  Remember me
 
  Forgot password?
La Vernia News
Google
Google

Preview the Paper
Preview this week's Paper

Consumer Updates

Here’s what to do about the ‘Heartbleed’ bug




E-Mail this Story to a Friend
Print this Story

Disclaimer:
The author of this entry is responsible for this content, which is not edited by the Wilson County News or wilsoncountynews.com.
Better Business Bureau
April 11, 2014 | 1247 views | Post a comment

Better Business Bureau (BBB) warns the public to safeguard private information against the “Heartbleed” security threat. The Heartbleed bug is a computer security vulnerability that can reveal the contents of a server’s memory and expose private data such as usernames, passwords and even credit card information.

The Heartbleed bug exploits a flaw in the Secure Sockets Layer (SSL) of popular open source software called OpenSSL. SSL is the standard security technology that establishes an encrypted link between a user’s web browser and the server where a website is hosted. It is used to secure numerous kinds of data transfers, including email, instant messaging, social media and business transactions. Encryption is essential to Internet security.

The flaw, discovered on April 7, but apparently in existence for two years, means that attackers can copy a server’s digital keys and use them to impersonate servers to decode communications from the past and potentially, the future.

For businesses:

BBB recommends that businesses immediately check to see if their website(s) use Open SSL or have been vulnerable. One way to check, recommended by tech/media website CNET, is a tool developed by a cryptography consultant. If vulnerability exists, businesses should work with their IT department or computer professional to install a more secure SSL on their websites.

For systems administrators:

Systems administrators should follow the advice of the U.S. Computer Emergency Response Team (US-CERT). Although this information comes from the U.S. government, it is applicable to systems in other countries.

For consumers:

CNET has also published a list of the top 100 websites, which it is updating regularly as it checks for vulnerabilities and repairs. Consumers can check this list or use the tool mentioned above to see if websites they regularly use are free of problems, or have fixed vulnerabilities.

It’s also imperative that consumers change passwords on all sites, particularly those that retain personal identifying information. Change your password after confirming that the site is not vulnerable or has fixed its SSL.

The “Stop. Think. Connect.” campaign offers the following suggestions to protect your identity:

Secure your accounts: Ask for protection beyond passwords. Many account providers now offer additional ways for you to verify who you are before you conduct business on that site.

Make passwords long and strong: Combine capital and lowercase letters with numbers and symbols to create a more secure password.

Unique account, unique password: Separate passwords for every account helps to thwart cybercriminals.

Write it down and keep it safe: Everyone can forget a password. Keep a list that’s stored in a safe, secure place away from your computer.

Own your online presence: When available, set the privacy and security settings on websites to your comfort level for information sharing. It’s okay to limit how and with whom you share information.

BBB also suggests choosing passwords that are phrases (for instance, ilovetofish) and making each letter O into a zero to make the password more complex. Look into password management software to help you keep track of “long and strong” passwords.

BBB’s servers do not use Open Source SSL. All of its websites have been checked and found to be free of vulnerabilities.

For more tips you can trust, visit bbb.org. For the latest news and information, follow us on Facebook and Twitter.
To check out a company and find trustworthy businesses, visit bbb.org.
Find other news story topics by visiting our Press Release News Center.
 
« Previous Blog Entry (April 9, 2014)
 


Your Opinions and Comments
Be the first to comment on this story!

You must be logged in to post comments:



Other Consumer Updates


 
^Top
  Copyright © 2014 Wilson County News. All rights reserved. Web development by Drewa Designs.
^Top