Heartbleed FUD: scarier than Jedward as triplets?

Davey Winder thinks the fact password reset floodgates are about to open...

The potential seriousness of such a vulnerability as Heartbleed cannot be downplayed, that's for sure. However, arm waving and running around informing everyone the sky is falling is not the way to deal with any crisis though. Indeed, even if the sky were falling down it wouldn't do much good.

As the media, the IT security industry, open source pundits and Joe User alike get swept away by the story so the FUD floodgates have opened. And FUD (that's Fear, Uncertainty and Doubt) would be a more unwelcome trio than if Jedward were triplets.

Not every site out there has been touched by this vulnerability, not every site uses OpenSSL. But plenty have and do. It's not the end of the internet, and it's not open day for the bad guys either as although grabbing sensitive data is by all means possible it's by no means a walk in the park.

From the enterprise perspective the FUD-free advice is for your pre-existing disaster plans to kick in and find those machines which are vulnerable, patch them and do the revoke and reissue thing before auditing the nature of any potential exposure and getting on with your business.

From the end user perspective, there are tools out there already which will tell you if a service was vulnerable to Heartbleed and, importantly, whether it has patched, revoked and reissued; if it has it will then recommend you change your password for that service.

As for the bad guys, I expect a flood of fake password reset notifications to start rolling out real soon now. I didn't think I would end this piece with a Celine Dion reference, but I imagine the Heartbleed FUD will go on...

Featured Resources

Digital document processes in 2020: A spotlight on Western Europe

The shift from best practice to business necessity

Download now

Four security considerations for cloud migration

The good, the bad, and the ugly of cloud computing

Download now

VR leads the way in manufacturing

How VR is digitally transforming our world

Download now

Deeper than digital

Top-performing modern enterprises show why more perfect software is fundamental to success

Download now

Most Popular

The top 12 password-cracking techniques used by hackers
Security

The top 12 password-cracking techniques used by hackers

5 Oct 2020
iPhone 12 lineup official with A14 Bionic chip and 5G support
Mobile Phones

iPhone 12 lineup official with A14 Bionic chip and 5G support

13 Oct 2020
Google blocked record-breaking 2.5Tbps DDoS attack in 2017
Security

Google blocked record-breaking 2.5Tbps DDoS attack in 2017

19 Oct 2020