Major computer security flaw exposed (Heartbleed)

[DRW50]

http://heartbleed.com/

http://www.cnet.com/news/heartbleed-bug-undoes-web-encryption-reveals-user-passwords/

This has been going on for several years, apparently.

There's some question of whether people should change their passwords or not. Today some have been saying that people should wait and see, because passwords put into the system more recently are more likely to get noticed. I don't know.

One site has a test, and it doesn't work for all sites, but seems to for some of the big sites. CNET put out a list of the top 100 sites and their status.

http://www.forbes.com/sites/larrymagid/2014/04/09/test-for-heartbleed-vulnerability-and-advice-on-changing-passwords/

http://www.cnet.com/how-to/which-sites-have-patched-the-heartbleed-bug/

http://filippo.io/Heartbleed/faq.html