A new security bug means that people all across the Web are vulnerable to having their passwords and other sensitive data stolen. Here’s what consumers can do to protect themselves.<\/p>\n
by\u00a0Richard Nieva<\/p>\n
![\"\"](\"http:\/\/thelehighacresgazette.com\/news\/wp-content\/uploads\/2014\/04\/heartbleed1-300x223.jpg\" "\\"heartbleed1\\"")
A major new security\u00a0vulnerability dubbed Heartbleed\u00a0was disclosed Monday night with severe implications for the entire Web. The bug can scrape a server’s memory, where sensitive user data is stored, including private data such as usernames, passwords, and credit card numbers.<\/p>\n
It’s an extremely serious issue, affecting some 500,000 servers, according to Netcraft, an Internet research firm. Here’s what you can do to make sure your information is protected, according to security experts contacted by CNET:<\/p>\n
Do not log into accounts from afflicted sites\u00a0until you’re sure the company has patched the problem. If the company hasn’t been forthcoming — confirming a fix or keeping you up to date with progress — reach out to its customer service teams for information, said John Miller, security research manager for TrustWave, a security and compliance firm.<\/p>\n
Some Web sites that appeared to have been affected included Yahoo and OK Cupid, though the companies have said their sites are all or partly fixed (see below for details). You can\u00a0check sites on an individual basis here, though caution is still advised even if the site gives you an “all clear” indication. If you’re given a red flag, avoid the site for now.<\/p>\n
The natural response might be to want to change passwords immediately, but security experts suggest waiting for confirmation of a fix because further activity on a vulnerable site could exacerbate the problem.<\/p>\n
Once you’ve got confirmation of a security patch, change passwords of sensitive accounts\u00a0like banks and email first. Even if you’ve implemented two-factor authentication — which, in addition to a password asks for another piece of identifying information, like a code that’s been texted to you — changing that password is recommended.<\/p>\n
Don’t be shy about reaching out to small businesses that have your data\u00a0to make sure they are secure.\u00a0While the high-profile companies like Yahoo and Imgur certainly know about the problem, small businesses might not even be aware of it, said TrustWave’s Miller. Be proactive about making sure your information is safe.<\/p>\n
Keep a close eye on financial statements for the next few days.\u00a0Because attackers can access a server’s memory for credit card information, it wouldn’t hurt to be on the lookout for unfamiliar charges on your bank statements.<\/p>\n
Even after following these guidelines, there is still some riskiness in surfing the Web in the aftermath of the bug. Heartbleed is even said to affect browser cookies, which track users’ activity on a site, so even visiting a vulnerable site without logging in could be risky. The Tor Project, which stresses anonymity and privacy, wrote in a blog post\u00a0that users with those needs “might want to stay away from the Internet entirely for the next few days while things settle.”<\/p>\n","protected":false},"excerpt":{"rendered":"
A new security bug means that people all across the Web are vulnerable to having their passwords and other sensitive data stolen. Here’s what consumers can do to protect themselves.… <\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"_links":{"self":[{"href":"https:\/\/thelehighacresgazette.com\/news\/wp-json\/wp\/v2\/posts\/30154"}],"collection":[{"href":"https:\/\/thelehighacresgazette.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thelehighacresgazette.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thelehighacresgazette.com\/news\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/thelehighacresgazette.com\/news\/wp-json\/wp\/v2\/comments?post=30154"}],"version-history":[{"count":0,"href":"https:\/\/thelehighacresgazette.com\/news\/wp-json\/wp\/v2\/posts\/30154\/revisions"}],"wp:attachment":[{"href":"https:\/\/thelehighacresgazette.com\/news\/wp-json\/wp\/v2\/media?parent=30154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thelehighacresgazette.com\/news\/wp-json\/wp\/v2\/categories?post=30154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thelehighacresgazette.com\/news\/wp-json\/wp\/v2\/tags?post=30154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}