Saturday 12 April 2014

How to protect from Heartbleed bug



                              How to protect from Heartbleed bug


Heartbleed is a worse flaws in our websites and by affecting this we are compromise our secure data like social site user name, passwords, credit card details but we may have been compromising since two years , because Heartbleed has been active since last two years and so now as we came to know now a days , keep step towards protecting of our data during online services.
Protection from affected or going to get affect by the Heartbleed , we should keep the following points in our mind as a domestic treatment or first aid treatment and keep on eye
(a)  If you are using mail account, online banking, social sites like facebook, google+…. You must keep changing your password very frequently.
(b) Password must in alphanumeric with special character like very strong password.
(c) Always use and follow the guidelines of particular sites to protect from hacker to steal your private and important data.
(d)  If your website is OpenSSL oriented of course, and of course must be in up to date.
(e) As we know that the vulnerability in OpenSSL has been approximately since two years, by assuming that we may have compromised our secure information, account passwords, users name etc.. we should change our passwords, user names as possible as with strong passwords guidelines.
(f)  Don’t use sensitive sites like where you privacy is more concerns like during using of net banking, payment transaction by any way ,any medium or log in to any account , you must avoid to open or browse several other websites.
(g) Don’t open any sites which are not trustable.


What is Heartbleed bug


               What is Heartbleed bug



Heartbleed bug is a major flaw in the Open SSL, the open-source encryption standard which is used by most of the site to keep secure of users’ online data processing during the account opening or accessing to any mail.

 Neel Mehta who is Google Security researcher reported to the team behind Open SSL about the flaw. Heartbleed is basically steal the data we are using, the credit card number or email password. Although we do not have the that much control over this very instantly but we can keep protection of stealing data. There are way to keep secure of data from Facebook, Gmail, or other account we are using.

The Heartbleed has been affecting our sites approximately two years and we even not able to realise very quickly as Heartbleed has been attacking of mostly private data, passwords, username. The Heartbleed may have been affecting millions of website since two years. So we have to pull our shocks towards securing of data and absolutely there is way to keep secure of date being hacked.
Heartbleed has been taking the advantage of OpenSSL software in other way to hacked data. The flaw was discovered by security firm codenomicon and Neel Mehta, a Google security researcher.
It fact that by this worse reveals , the Heartbleed bug allow to internet to read the memory of the systems protected by the vulnerable versions of OpenSSL softwere. This compromises the secret keys used to identify the service providers to encrypt the traffic, passwords, username which allows hackers to access the data , your passwords, credit card details.
Heartbleed is a serious vulnerability, flaw in the OpenSSL internet protocol software which allows hacker to get data of users who is affected by heartbleed.
How to protect from Heartbleed bug
Of course, if there is cyber-attack in such a massive way to the internet world , we need to take care of internet site to protect the users private data .

What is Heartbleed?
Heartbleed is a security vulnerability in OpenSSL software that lets a hacker access the memory of data servers. According to Netcraft, an Internet research firm, 500,000 Web sites could be affected. That means a user's sensitive personal data -- including usernames, passwords, and credit card information -- is potentially at risk of being intercepted.
The vulnerability also means an attacker could steal a server's digital keys that are used to encrypt communications and get access to a company's secret internal documents.