Reuters - Video

EDITION: U.S. | U.K. | IN

Technology

Heartbleed bug puts private web info at risk

Thursday, Apr 10, 2014 - 02:19

April 10 - There is little users can do to hide from the latest internet bug- a flaw in a security system used by the majority of web sites. Bobbi Rebell reports.

▲ Hide Transcript

View Transcript

A new threat to passwords and everything they protect. Heartbleed is a flaw in openSSL, the open-source encryption standard. That is what gives users a secure line to send information, like email. Computers check to see if there is another computer at the other end of the secure connection- so it sends out what's known as a heartbeat- hackers can send a packet of data that looks like a heartbeat- but tricks the computer into sending data stored in its memory- like a password. Hackers can even steal encryption keys. Julia Horwitz of the Electronic Privacy Information Center: SOUNDBITE: JULIA HORWITZ, CONSUMER PROTECTION COUNSEL, ELECTRONIC PRIVACY INFORMATION CENTER (ENGLISH) SAYING: "The encryption software that has the bug in it is the most popular form of web encryption on the internet. So something like more than two-thirds of the internet that is encrypted is encrypted using openSSL TLS which is what the encryption software is." OpenSSL software is used on servers that host websites, but not PCs or mobile devices. So even though the bug exposes passwords and other data entered on those devices to hackers, it must be fixed by website operators. So there's not much consumers can do alone. Big players like Facebook, Yahoo and Google have told Reuters they have taken steps to lower the impact on users. And Google says users do not have to change passwords. Amazon says Amazon.com has not been affected- but some of its cloud services that support apps like Netflix and Pinterest had been vulnerable. But even knowing whether you've been hit- is tough. SOUNDBITE: JULIA HORWITZ, CONSUMER PROTECTION COUNSEL, ELECTRONIC PRIVACY INFORMATION CENTER (ENGLISH) SAYING: "It doesn't leave a trace, so it's hard to track it and see when it's been used, and where it's been. So, as far as we can tell it's been in operation for about two years maybe a little more than two years which means that potentially any of the services that use openSSL in order to encrypt have been exposed to this bug and therefore the users of those services." For consumers, changing passwords will help- but they have to be changed again after sites patch vulnerability and update certificates - otherwise the new one is vulnerable.

Heartbleed bug puts private web info at risk

Thursday, Apr 10, 2014 - 02:19

Top News »

Money »

S&P 500 to new record on improving economy S&P 500 to new record on improving economy

Fri, Aug 29, 2014 - (2:31)

Finding meaning in the S&P 500 2000 mark Finding meaning in the S&P 500 2000 mark

Mon, Aug 25, 2014 - (2:35)

S&P falls back from record high S&P falls back from record high

Fri, Aug 22, 2014 - (1:35)

S&P 500 closes at new high S&P 500 closes at new high

Thu, Aug 21, 2014 - (1:24)

S&P 500 just shy of record S&P 500 just shy of record

Wed, Aug 20, 2014 - (2:23)

Apple hits $100 a share Apple hits $100 a share

Tue, Aug 19, 2014 - (2:06)

Nasdaq closes at 14-year high Nasdaq closes at 14-year high

Mon, Aug 18, 2014 - (2:23)

Putin puts Wall Street in buying mood Putin puts Wall Street in buying mood

Thu, Aug 14, 2014 - (2:10)

We've become a promotional culture-RetailMeNot's Bodge We've become a promotional...

Thu, Aug 14, 2014 - (4:39)

The Exchange »

The Exchange: Hot commodity The Exchange: Hot commodity

Wed, Jul 16, 2014 - (9:25)

The Exchange: Constitutional crusade The Exchange: Constitutional crusade

Wed, Jun 25, 2014 - (11:35)

The Exchange: The value of money The Exchange: The value of money

Mon, Jun 02, 2014 - (9:53)

The Exchange: China’s Second Continent The Exchange: China’s Second Continent

Tue, May 27, 2014 - (9:35)

The Exchange: A master of business arts The Exchange: A master of business arts

Thu, May 08, 2014 - (8:24)

The Exchange: America's bankrupt cities The Exchange: America's bankrupt cities

Mon, May 05, 2014 - (8:52)

The Exchange: Let the rocking commence The Exchange: Let the rocking commence

Tue, Apr 08, 2014 - (8:13)

The Exchange: The Moneyball fallacies The Exchange: The Moneyball fallacies

Mon, Mar 24, 2014 - (9:54)

Is doing good a good business? Is doing good a good business?

Mon, Mar 17, 2014 - (7:38)

Reuters Investigates »

Re-homing victim: "I could have been dead" Re-homing victim: "I could have been dead"

Wed, Feb 19, 2014 - (8:24)

Cops and loggers in the Amazon rainforest Cops and loggers in the Amazon rainforest

Fri, Jan 10, 2014 - (4:01)

"Passed around like a dog" "Passed around like a dog"

Thu, Aug 29, 2013 - (6:32)

Adopted, then abandoned online Adopted, then abandoned online

Thu, Aug 29, 2013 - (13:21)

How the DEA keeps its secrets secret How the DEA keeps its secrets secret

Mon, Aug 05, 2013 - (1:36)

How education lost its role as the great equalizer - Reuters Investigates How education lost its role as the great...

Mon, Dec 17, 2012 - (7:52)

Jihad Jane: From abused child to American jihadist - Reuters Investigates Jihad Jane: From abused child to American...

Sat, Dec 08, 2012 - (10:01)

Jihad Jane: The order to kill - Reuters Investigates Jihad Jane: The order to kill - Reuters...

Sun, Dec 09, 2012 - (10:39)

Moving Pictures »

Images of August Images of August

Fri, Aug 29, 2014 - (1:00)

Mending dolls, teddies and hearts Mending dolls, teddies and hearts

Fri, Aug 22, 2014 - (3:12)

"Old timers" sail the Chesapeake Bay "Old timers" sail the Chesapeake Bay

Mon, Aug 11, 2014 - (2:27)

Burned memories Burned memories

Fri, Aug 08, 2014 - (3:02)

Images of July Images of July

Thu, Jul 31, 2014 - (1:20)

World Cup: passion on the pitch World Cup: passion on the pitch

Fri, Jul 11, 2014 - (1:00)

A refugee in America gives back A refugee in America gives back

Wed, Jul 02, 2014 - (3:25)

A long search for refuge A long search for refuge

Fri, Jun 20, 2014 - (3:04)

World Cup: Around the globe in 50 goals World Cup: Around the globe in 50 goals

Fri, Jun 06, 2014 - (1:08)

VIVID – Sydney’s spectacle of light VIVID – Sydney’s spectacle of light

Fri, May 30, 2014 - (1:37)