Tuesday, February 24, 2015

Cybersecurity Compromised due to the SSH Heartbleed Bug

Previously I talked about how HTTPS was always secure and how it would never be compromised ever. The SSH heartbleed bug allows people who are attacking a server to get permission and access to all files without leaving any trace behind. This practice basically allows people to extract important information from peoples emails, websites, and networks. The Heartbleed bug is an internal bug of the system, it is a basic programming error which enables leakage of memory. This bug allowed 1000's of private keys of different websites being leaked therefore giving people access to how there data is sent and what the data is without them really hacking anything. They are given permission to intercept and decrypt because they have the sender's private key. This bug infected a large amount of small businesses that used openSSL to secure their information and emails. A survey showed that openSSL was used by over 60% of the businesses to encrypt their corporate data.Although the bug was fixed and a new version of openSSL was released, this was one of the biggest unintentional data leaks in the world. Thanks to modern programming the bug was fixed before the bug became a large scale data leak.  For more technical information please goto: http://heartbleed.com/

No comments:

Post a Comment