Created: 05/10/2014 By: RCcola1987
Carter Enterprises, an IT support company, has been getting many calls about Heartbleed, and what people and business can do about it. The simple answer is Not much. If you are using another persons website then you are there mercy to update there OpenSSH install and revoke and issue new SSL certificates with new private keys. If you are a business you need to check if your site was vulnerable then follow those instructions.
The danger of Heratbleed is that it has provided a method to have a Target like breach of security keys and in turn access to your data. Once an attacker has the private keys to a site they can use man in the middle attacks and send you to there site without you even knowing. This could be your bank or just a retail store you shop at on line but the consequences are the same; your credit card numbers could be stolen and even your identity. That is why as a community we need to fix this issue asap and work together to stop it form happening again.
For those interested in learning more here are some great resources below:
