Reuters - Video

EDITION: U.S. | U.K. | IN

Technology

Heartbleed bug puts private web info at risk

Thursday, Apr 10, 2014 - 02:19

April 10 - There is little users can do to hide from the latest internet bug- a flaw in a security system used by the majority of web sites. Bobbi Rebell reports.

▲ Hide Transcript

View Transcript

A new threat to passwords and everything they protect. Heartbleed is a flaw in openSSL, the open-source encryption standard. That is what gives users a secure line to send information, like email. Computers check to see if there is another computer at the other end of the secure connection- so it sends out what's known as a heartbeat- hackers can send a packet of data that looks like a heartbeat- but tricks the computer into sending data stored in its memory- like a password. Hackers can even steal encryption keys. Julia Horwitz of the Electronic Privacy Information Center: SOUNDBITE: JULIA HORWITZ, CONSUMER PROTECTION COUNSEL, ELECTRONIC PRIVACY INFORMATION CENTER (ENGLISH) SAYING: "The encryption software that has the bug in it is the most popular form of web encryption on the internet. So something like more than two-thirds of the internet that is encrypted is encrypted using openSSL TLS which is what the encryption software is." OpenSSL software is used on servers that host websites, but not PCs or mobile devices. So even though the bug exposes passwords and other data entered on those devices to hackers, it must be fixed by website operators. So there's not much consumers can do alone. Big players like Facebook, Yahoo and Google have told Reuters they have taken steps to lower the impact on users. And Google says users do not have to change passwords. Amazon says Amazon.com has not been affected- but some of its cloud services that support apps like Netflix and Pinterest had been vulnerable. But even knowing whether you've been hit- is tough. SOUNDBITE: JULIA HORWITZ, CONSUMER PROTECTION COUNSEL, ELECTRONIC PRIVACY INFORMATION CENTER (ENGLISH) SAYING: "It doesn't leave a trace, so it's hard to track it and see when it's been used, and where it's been. So, as far as we can tell it's been in operation for about two years maybe a little more than two years which means that potentially any of the services that use openSSL in order to encrypt have been exposed to this bug and therefore the users of those services." For consumers, changing passwords will help- but they have to be changed again after sites patch vulnerability and update certificates - otherwise the new one is vulnerable.

Heartbleed bug puts private web info at risk

Thursday, Apr 10, 2014 - 02:19

Top News »

Investing 201 »

Arian Foster = BlackBerry? Arian Foster = BlackBerry?

Fri, Oct 25, 2013 - (3:16)

Don’t miss these red flags for IPOs Don’t miss these red flags for IPOs

Thu, Oct 10, 2013 - (2:34)

Copycat currency trading Copycat currency trading

Wed, Oct 02, 2013 - (2:28)

When to dump a winner When to dump a winner

Tue, Sep 24, 2013 - (1:55)

Where gold might again attract Jim Rogers Where gold might again attract Jim Rogers

Thu, Sep 19, 2013 - (2:05)

Why savings interest rates won't budge Why savings interest rates won't budge

Fri, Sep 13, 2013 - (2:09)

Buy local? ETFs try the trend Buy local? ETFs try the trend

Thu, Sep 05, 2013 - (2:42)

The better bond funds The better bond funds

Wed, Aug 07, 2013 - (2:40)

Best bargain in 40 years? European stocks Best bargain in 40 years? European stocks

Thu, Aug 01, 2013 - (2:24)

Invest like an activist Invest like an activist

Fri, Jul 26, 2013 - (2:49)

Money Clip »

3 things to do before disaster strikes 3 things to do before disaster strikes

Wed, Sep 18, 2013 - (1:39)

Your must-do money list Your must-do money list

Wed, Sep 11, 2013 - (1:24)

The worst "best" financial advice The worst "best" financial advice

Wed, Sep 04, 2013 - (1:42)

Forget gold: The case for REITs Forget gold: The case for REITs

Fri, Apr 26, 2013 - (1:19)

3 rules for buying a house now 3 rules for buying a house now

Thu, Apr 18, 2013 - (1:39)

“Stalking” your dream home - Money Clip “Stalking” your dream home - Money Clip

Wed, Mar 27, 2013 - (2:50)

3 hidden tax deductions - Money Clip 3 hidden tax deductions - Money Clip

Thu, Mar 21, 2013 - (1:33)

Reuters Investigates »

Re-homing victim: "I could have been dead" Re-homing victim: "I could have been dead"

Wed, Feb 19, 2014 - (8:24)

Cops and loggers in the Amazon rainforest Cops and loggers in the Amazon rainforest

Fri, Jan 10, 2014 - (4:01)

"Passed around like a dog" "Passed around like a dog"

Thu, Aug 29, 2013 - (6:32)

Adopted, then abandoned online Adopted, then abandoned online

Thu, Aug 29, 2013 - (13:21)

How the DEA keeps its secrets secret How the DEA keeps its secrets secret

Mon, Aug 05, 2013 - (1:36)

How education lost its role as the great equalizer - Reuters Investigates How education lost its role as the great...

Mon, Dec 17, 2012 - (7:52)

Jihad Jane: From abused child to American jihadist - Reuters Investigates Jihad Jane: From abused child to American...

Sat, Dec 08, 2012 - (10:01)

Jihad Jane: The order to kill - Reuters Investigates Jihad Jane: The order to kill - Reuters...

Sun, Dec 09, 2012 - (10:39)

Moving Pictures »

Still missing – MH370 Still missing – MH370

Fri, Sep 05, 2014 - (2:05)

Images of August Images of August

Fri, Aug 29, 2014 - (1:00)

Burning Together Burning Together

Mon, Sep 01, 2014 - (2:23)

Mending dolls, teddies and hearts Mending dolls, teddies and hearts

Fri, Aug 22, 2014 - (3:12)

"Old timers" sail the Chesapeake Bay "Old timers" sail the Chesapeake Bay

Mon, Aug 11, 2014 - (2:27)

Burned memories Burned memories

Fri, Aug 08, 2014 - (3:02)

Images of July Images of July

Thu, Jul 31, 2014 - (1:20)

World Cup: passion on the pitch World Cup: passion on the pitch

Fri, Jul 11, 2014 - (1:00)

A refugee in America gives back A refugee in America gives back

Wed, Jul 02, 2014 - (3:25)

A long search for refuge A long search for refuge

Fri, Jun 20, 2014 - (3:04)