In this article, I will tackle the HeartBleed bug that spread the news lately as well as what should normal website users be aware of by mentioning what could be affected and how to protect it.
HeartBleed Bug: What is It? (A Brief Tech Overview)
At its core, the HeartBleed bug is a bug that exists within the implementation of a famous library used for encryption over the web (the OpenSSL). This bug, just like any other bug, can be fixed (technically) through an update to the software being used. What makes this bug unique is the following:
This bug allows attackers to steal secrets (private keys) that are used to encrypt data. By doing so, attackers will not only be able to steal information. They will also be able to keep stealing that information until two things are fixed:
HeartBleed: What Can be Affected?
Any data being encrypted can be affected. This includes the encryption of passwords, credit cards, communication messages, emails, etc.
I know this sounds tough, but it is