Heartbleed & Solarbotics

Solar botics
April 10, 2014

As I imagine most of you out there have heard by now, there's a pretty serious vulnerability in the OpenSSL that was announced on April 7th called CVE-2014-0160, better known as Heartbleed. For those of you wondering what the heck this "Heartbleed" thing is, awhile back OpenSSL added a "heartbeat" feature which allowed servers and computers with a secure connection to "ping" each other regularly, in order to keep the connection open. The problem comes from a bug in OpenSSL which lets a computer without the secure connection to still ping this way, and that connection could be exploited to include up to 64K chunks from the server's RAM, which unfortunately can include recently decrypted usernames, passwords, etc.

What Is Solarbotics Doing About it?
We've already taken steps to patch this hole on our own servers, and have reissued our EV SSL certificate (if you take a peek at the cert, you'll notice the validation date has been bumped up to 4/9/2014) which has already been installed. We've also cleared all existing sessions on the server as those were at risk as well. The unfortunate side effect of that is that anyone who had been building a cart without logging in will need to do so again.

What Should You Be Doing About it?
You should be giving strong consideration to resetting & updating all your passwords (yes seriously), particularly for the important things in your life like email, banking, facebook/twitter/reddit etc. This vulnerability was announced Monday, and if someone happened to pick up your login credentials before this was patched on one of the sites you visit, the attackers could still have your login credentials. We recommend opting for two-factor verification where ever possible. Of course, not using the same password for everything becomes an important part as well and for those of you worried about keeping track, we're big fans of Keepass here at Solarbotics.

MORE POSTS

November 2, 2015
Monday New Product: Teensy v3.2, Bracket...

PJRC Teensy USB Board, Version 3.2 $24.75 The Teensy USB Development Board is a complete USB-based microcontoller development system. Bracket Pair for Sharp Distance Sensors - Parallel $4.20 Bracket Pair for Sharp GP2Y0A02, GP2Y0A21, and GP2Y0A41 Distance Sensors - Parallel Bracket Pair for Sharp Distance Sensors - Multi-option $4.85 Bracket Pair for Sharp GP2Y0A02, GP2Y0A21, […]

October 24, 2012
Everything's Under Control. Situation No...

You might be wondering what the heck happened with our site this morning. Our response would be, as the one and only Han Solo once said, "Uh, we had a slight weapons malfunction, but uh... everything's perfectly all right now. We're fine. We're all fine here now, thank you. How are you?" This morning we […]

February 25, 2002
2002 LANL Workshop in the works...

Word from up the pipe at the Los Alamos National Laboratories is that the 10th Annual BEAM workshop is slated to happen May 2-4, 2002 at the Betty Ehart Center in Los Alamos, New Mexico (same place as the 1999 workshop). Thanks to Joe Vigil (of LANL) who spearheaded the initiative after Paul Argo (the […]

December 3, 2004
PDXBot 04 video - it's good!

Ok people, the sales on the PDXBot 04 DVD have been less-than-stellar. I brought them in primarily because I thought other people wanted to see robot competitions that you may not otherwise get to see. Also, a portion of the proceeds go to help the PARTS club in Portland Oregon. If you have a robo-geek […]

Solarbotics Ltd Logo
Solarbotics has been operating for more than 25 years, bringing electronics know-how and supplies to both the electronics professional and hobbyist. We'll be happy to help you too!

Solarbotics, Ltd. is not responsible for misprints or errors on product prices or information. For more information, please see our Terms and Conditions.

Warning: This product contains chemicals known to the State of California to cause cancer and birth defects or other reproductive harm.
Please visit www.P65Warnings.ca.gov for more information. This item was manufactured prior to August 31, 2018.