Just thought I'd pass along a problem that was discovered in OpenSSL - http://heartbleed.com Basically, there's a bug in OpenSSL 1.0.1-1.0.1f that lets you pull all sorts of stuff from an OpenSSL-based connection that uses SSL heartbeats. It's bad enough that I called my parents to tell them to hold off on online banking until they can confirm the bank's have got it patched.
-David
_______________________________________________ clug-talk mailing list clug-talk@clug.ca http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying
