Heartbleed bug list of affected sites!

[doxydad]

Go here, it's lengthy, but I found all of my financial stuff...Good luck, hope this will alleviate some fears out there. [link:https://github.com/musalbas/heartbleed-masstest/blob/master/top1000.txt|

[bemildred]

1. Thank you. nt

[napkinz]

2. I'm not very computer literate and I've always been told to be wary ...

does anyone know if that link itself is SAFE to click on?

thanks

[DotGone]

3. Yes, it's safe, just a link to text file on github n/t

[napkinz]

4. when I see a link that I'm not familiar with, I always wonder:

"How do you know if it's safe to click on?"

I've been told, links that appear to be helpful are often the very ones that give you viruses. They appear helpful as a way of luring in the naive (the computer illiterate).

[doxydad]

11. OP says it's fine to click on it. n/t

[foo_bar]

5. this list seems kinda useless

"Testing citibank.com... no SSL."

The account management sections of these websites are typically SSL encrypted and live on subdomains (e.g., online.citibank.com, chaseonline.chase.com, etc.), and at this point most of the major financial institutions have already plugged the hole, so this shouldn't alleviate any fears; the point is, many sites with the little padlock icon were potentially compromised, so it make sense to change your password on sensitive sites whether or not they subsequently patched their OpenSSL library (and whether or not their marketing portal uses encryption.)

[napkinz]

6. should we change our DU password?

nt

[foo_bar]

7. nope, no SSL on DU (look for links beginning with https://)

(see: http://www.democraticunderground.com/12595570)

[doxydad]

13. no need for that.

The only sites I would worry about is medical or financial ones.

[hlthe2b]

8. So far, I'm on the lucky side... I also installed the chrome plug in that supposedly detects

sites that are vulnerable... I tend to use firefox exclusively, but will put it through chrome first if it is a site that hasn't been listed.

[hlthe2b]

9. i think this info from cnet.com may be more useful-tells you which sites you SHOULD change passwords

and those which were NEVER vulnerable.

http://www.cnet.com/news/which-sites-have-patched-the-heartbleed-bug/

[frylock]

10. xhamster is safe thank goodness!

[MineralMan]

12. What is xhamster?

[frylock]

14. you don't want to know!

[MineralMan]

15. You mentioned it, so I'm curious.

If it's not an interesting thing, why mention it in reference to this exploitation malware? I know that hamsters are related to my KIA Soul. Is this a KIA thing? Should I be concerned with KIA websites or something?

[frylock]

17. it's a site that hosts porn videos..

It just really stood out among all those other sites that I couldn't help but comment.

[MineralMan]

18. I see. Well, no wonder I didn't recognize it.

[Tyrs WolfDaemon]

23. I wouldn't know this but I hear they also

have pics for furries, the hentai and art kind.


Seriously though, who wouldn't want to have a drink with her?

[doxydad]

16. xhamster ....

...is a porn site. That danged frylock is a pistol I tell ya! HA!

[Xithras]

19. So, of the top 1000 websites, 48 were vulnerable.

Pretty much as I expected.

One of the really ironic things about Heartbleed is that it disproportionately impacts sites that try to stay on the bleeding edge with their technology. This is consistent with what my company saw when we audited our own data centers and our clients data centers. Some of our newer services were exposed, but none of our older servers (over 18 months old) had any vulnerabilities.

Heartbleed was a serious vulnerability, but the original media claims that up to two-thirds of web sites were vulnerable was simply hysterics. I'm already seeing numbers saying that the actual percentage of websites exposed may be closer to 5-10%

Unfortunately, that 5-10% contains some of the biggest sites on the Internet.

[cyberswede]

20. So...

There are sites that exist called "chaturbate" and "youjizz" ? I was happier when I didn't know that.

[uppityperson]

21. +1, I agree

[RebelOne]

22. Thank goodness Bank of America is safe.

I do all my banking online. If it was listed as vulnerable, I would have had a panic attack.

[marions ghost]

24. Anybody heard about GoDaddy?

listed as password change recommended. But just wondering