Steam & Heartbleed

[Kazoo]

So I don't know how many of you heard of the Heartbleed vulnerability, but Steam announced yesterday that they resolved the vulnerabilities on their site. But it is still recommended that you change your password.

I'm not very knowledgeable on security and such, but it looks like this vulnerability has been around for a couple years. It was just discovered recently, so now all these sites are patching up and recommending you change your passwords. It's nothing you can fix on your end; you have to wait for the sites to resolve this with a patch.

I suppose it is up to you if you want to change your password, but I figured I should let everyone know that even Steam has patched.

 

[UnderCoverSpy16]

Oh wow, I did not know that kazoo!
I will change my password just to be safe.
Thank you for taking the time to announce this and warn us!

 

[CrashRIT]

As someone who does this professionally day-to-day, I recommend changing your more sensitive passwords (email, keepass/lastpass). Steam has SteamGuard so it's not really an issue, but if you feel the need, do so.

If you use LastPass, check out their site and they will let you know which you need to change: http://blog.lastpass.com/2014/04/lastpass-now-checks-if-your-sites-are.html -- if you dont use a password solution, google around for a list of major sites that are affected.

Have fun ladies and gents! It's certainly been an interesting past few days for us in the Information Security community.

 

[Kazoo]

Thank you, Crash!

Sent from my LG-D801 using Tapatalk

 

[Maserati]

Steam had one thing I always liked, they send you a code to confirm it was in fact you logging in.

 

[Nix]

....

This, again?

ugh, I'm running out of good passwords.

Thanks for the heads up Kazoo.

 

[Puliping]

....

This, again?

ugh, I'm running out of good passwords.

Thanks for the heads up Kazoo.

 

[Clavietika]

Thanks for the heads up!


Sent from the Howling Wastes using magic.

 

[Nix]

-snip-

It's funny, cause I just made up the first password that I've used that follows the second format

 

[fatyguy]

It's funny, cause I just made up the first password that I've used that follows the second format

Please don't ever use passwords following that format

 

[Rawburt]

romeojulietsherlockwatsonmickeyminniesacramento

6 characters and a capital.

 

[AndyGuy]

some more info on the issue at hand: http://www.cnet.com/news/heartbleed-bug-undoes-web-encryption-reveals-user-passwords/

 

[Bread]

Thank you for heads up

 

[Angoron]

Lol, I informed my dad about this the day before yesterday, and changed my pass cause I'm in the know. You know?