Heartbleed FUD: scarier than Jedward as triplets?
Davey Winder thinks the fact password reset floodgates are about to open...
The potential seriousness of such a vulnerability as Heartbleed cannot be downplayed, that's for sure. However, arm waving and running around informing everyone the sky is falling is not the way to deal with any crisis though. Indeed, even if the sky were falling down it wouldn't do much good.
As the media, the IT security industry, open source pundits and Joe User alike get swept away by the story so the FUD floodgates have opened. And FUD (that's Fear, Uncertainty and Doubt) would be a more unwelcome trio than if Jedward were triplets.
Not every site out there has been touched by this vulnerability, not every site uses OpenSSL. But plenty have and do. It's not the end of the internet, and it's not open day for the bad guys either as although grabbing sensitive data is by all means possible it's by no means a walk in the park.
From the enterprise perspective the FUD-free advice is for your pre-existing disaster plans to kick in and find those machines which are vulnerable, patch them and do the revoke and reissue thing before auditing the nature of any potential exposure and getting on with your business.
From the end user perspective, there are tools out there already which will tell you if a service was vulnerable to Heartbleed and, importantly, whether it has patched, revoked and reissued; if it has it will then recommend you change your password for that service.
As for the bad guys, I expect a flood of fake password reset notifications to start rolling out real soon now. I didn't think I would end this piece with a Celine Dion reference, but I imagine the Heartbleed FUD will go on...
In This Article
Managing security risk and compliance in a challenging landscape
How key technology partners grow with your organisationDownload now
Evaluate your order-to-cash process
15 recommended metrics to benchmark your O2C operationsDownload now
AI 360: Hold, fold, or double down?
How AI can benefit your businessDownload now
Getting started with Azure Red Hat OpenShift
A developer’s guide to improving application building and deployment capabilitiesDownload now