加拿大华人论坛 加拿大百科IT数码及移动互联 - 有IT高手来说说那个heartbleed病毒
在加拿大
听说很多人中招，连税局也中招。
评论
如果服务器(have access through Https:// ) 用了 OpenSSL 1.0.2-beta, and all versions of in the 1.0.1 series prior to 1.0.1g基本就会中招了。1.0.1g版本是没有问题的注意，信息泄漏是双向的，Client可以拿到Server端的内存（64K / Try)， server也可以拿到Client端的内粗访问被黑客监控的HTTPS服务器可能会泄漏你的信息（用户名，密码啥的）访问未知（比如黑客的陷阱服务器）也可能会泄漏你的信息（比如当时正在你的电脑上运行的程序所携带的信息。。）技术细节我估计不会公布。拿OpenSSL 1.0.1g的code比较一下也许能发现一些端倪。。
评论
大脑是个好东西，真希望每个人都有一个 超赞 赏 csm_widget 0$(VIP 0) 3722014-04-10#3 http://en.wikipedia.org/wiki/Heartbleed_bug
评论
大脑是个好东西，真希望每个人都有一个如果服务器(have access through Https:// ) 用了 OpenSSL 1.0.2-beta, and all versions of in the 1.0.1 series prior to 1.0.1g基本就会中招了。1.0.1g版本是没有问题的注意，信息泄漏是双向的，Client可以拿到Server端的内存（64K / Try)， server也可以拿到Client端的内粗访问被黑客监控的HTTPS服务器可能会泄漏你的信息（用户名，密码啥的）访问未知（比如黑客的陷阱服务器）也可能会泄漏你的信息（比如当时正在你的电脑上运行的程序所携带的信息。。）技术细节我估计不会公布。拿OpenSSL 1.0.1g的code比较一下也许能发现一些端倪。。点击展开...对只有1.0.1 到 1.0.1f 会受到攻击，前两天我们公司的调查结果，用的版本里都不在此列，据说CRA网站要关两天去升级，
评论
还真是关了网站了，---------------------------------------------CRA update regarding the Heartbleed Bug - Wednesday, April 9, 3pmThe Canada Revenue Agency (CRA) places first priority on ensuring the confidentiality of taxpayer information.After learning late yesterday afternoon about the Internet security vulnerability named the Heartbleed Bug that is affecting systems around the world, the CRA acted quickly, as a preventative measure, to temporarily shut down public access to our online services to safeguard the integrity of the information we hold. Applications affected include online services like EFILE, NETFILE, My Account, My Business Account and Represent a Client.We are currently working on a remedy for restoring online services and, at this time, anticipate that services will resume over the weekend.The CRA recognizes that this problem may represent a significant inconvenience for individual Canadians who count on the CRA for online information and services.Recognizing this, the Minister of National Revenue has confirmed that individual taxpayers will not be penalized for this service interruption.We continue to investigate any potential impacts to taxpayer information, and to be fully engaged in resolving this matter and restoring online services as soon as possible in a manner that ensures the private information of Canadians remains safe and secure.We will provide further information and daily updates at 3PM EDT on our home page.
·生活百科 来自原点的选择性率
·生活百科 太阳能池供暖
