Quote:
Originally Posted by Paul_Heery
|
Love those guys. Excellent link - thanks for that.
Basically if a site is using this version of OpenSSL for their encryption then someone can listen for the traffic, copy it, decrypt it and your username and password for that password might be in it.
If it is, well you could have given access to your bank to someone.
This is why two-factor authentication is so important for things that matter. If you had a regular password and then a one time password from somewhere else then getting the one password would not compromise you. The one time password you also have changes every time and you have some 'thing' either an app on your computer/smart device or a fob that creates the one time password. They would get that password which isn't good for more than one login.
Anyway.
I hate it when encryption bugs happen.