Origin of Eyeless Jack
Click… click… click…
Jack continued pressing the button on the remote, idly watching the different channels pop up before changing again. Nothing really came on during the weekends, surprisingly. Nothing but 'Paid Programing' and other TV shows he didn't enjoy. Sighing, the college student rose up from his sofa, making his way to the desk resting against the wall next to his bed. He was already done with homework, finishing most of it in class that day. Unlike his roommate, Jack could get his shit done fast enough to have the rest of the day to himself to do whatever.
He wasn't feeling to play any video games. Didn't really want to drive out anywhere. Swiping his black hoody off his chair, Jack slipped it on and grabbed his dorm keys shoving them in his pocket after closing the door behind him. A nice walk around the campus should do the trick. Fresh air usually calmed him, if not helped him think. Lately he'd been feeling… different. He knew it wasn't his b
Bad news. A major vulnerability, known as “Heartbleed,” has been disclosed for the technology that powers encryption across the majority of the internet. That includes Tumblr.
We have no evidence of any breach and, like most networks, our team took immediate action to fix the issue.
But this still means that the little lock icon (HTTPS) we all trusted to keep our passwords, personal emails, and credit cards safe, was actually making all that private information accessible to anyone who knew about the exploit.
[ bad advice snipped ]
You’ll be hearing more in the news over the coming days. Take care.
But don’t change your password yet?
Heartbleed is a very, very big deal, and it’s quite rightly scaring the crap out of people. The response here is more complicated than ‘change your passwords’, and that complication is very important.
Heartbleed dumps a portion of the server’s memory out to the attacker. This chunk of memory can contain sensitive information, including your password.
Here’s the kicker: the more recently a vulnerable server has processed your password, the more likely it is to appear in one of these chunks.
And more importantly, if you change your password, you are risking both your old and new passwords.
Send me an ask if you need help or more information, I’ll do what I can.