<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: The &#8220;Heartbleed&#8221; crypto bug</title>
	<atom:link href="http://habitablezone.com/2014/04/09/the-heartbleed-crypto-bug/feed/" rel="self" type="application/rss+xml" />
	<link>https://habitablezone.com/2014/04/09/the-heartbleed-crypto-bug/</link>
	<description></description>
	<lastBuildDate>Tue, 07 Apr 2026 19:18:10 -0700</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: DanS</title>
		<link>https://habitablezone.com/2014/04/09/the-heartbleed-crypto-bug/#comment-30453</link>
		<dc:creator>DanS</dc:creator>
		<pubDate>Thu, 17 Apr 2014 18:14:31 +0000</pubDate>
		<guid isPermaLink="false">http://habitablezone.com/?p=44334#comment-30453</guid>
		<description>&lt;blockquote&gt;&lt;center&gt;&lt;strong&gt;&lt;a href=&quot;http://www.scientificamerican.com/article/the-heartbleed-internet-security-flaw-what-you-need-to-know/?&amp;WT.mc_id=SA_WR_20140416&quot; rel=&quot;nofollow&quot;&gt;The &quot;Heartbleed&quot; Internet Security Flaw&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;Here is what you need to know to understand the problem and how to respond&lt;/center&gt; 

&lt;em&gt;Apr 10, 2014 &#124; Wendy M. Grossman, founder and former editor of the magazine &quot;The Skeptic&quot;&lt;/em&gt;

Consumers used to waking up every week or so to news of yet another Internet security hole or data breach may be hard-pressed to understand why Heartbleed, the hole in the commonly used Web security software OpenSSL, is different. But it is: Such diverse and nonalarmist security commentators as Bruce Schneier, along with the Electronic Frontier Foundation and Ars Technica, have all dubbed the bug &quot;catastrophic.&quot;
 
&quot;On the scale of 1 to 10, this is an 11,&quot; Schneier wrote on his blog yesterday.
 
So: What is it? How do you know if it affects you? What should you do about it?

SSL—for Secure Sockets Layer—is a protocol used ubiquitously on the Web to protect confidential user information in transit. This includes, but is not limited to, user IDs and passwords, credit card details, and other personal information. When you see HTTPS at the beginning of the address in your browser&#039;s address bar, that syntax indicates that SSL is in use to encrypt the traffic between your computer and the Web server at the other end. Increased used of SSL to protect the queries and messages users type into search engines, Webmail, and social networks so they cannot be read in transit has been an important part of the Web&#039;s response to Edward Snowden&#039;s revelations of endemic National Security Agency spying on Internet traffic.&lt;/blockquote&gt;


&lt;a href=&quot;http://www.scientificamerican.com/article/the-heartbleed-internet-security-flaw-what-you-need-to-know/?&amp;WT.mc_id=SA_WR_20140416&quot; rel=&quot;nofollow&quot;&gt;More&lt;/a&gt;, from Scientific American.</description>
		<content:encoded><![CDATA[<blockquote><p><center><strong><a href="http://www.scientificamerican.com/article/the-heartbleed-internet-security-flaw-what-you-need-to-know/?&#038;WT.mc_id=SA_WR_20140416" rel="nofollow">The &#8220;Heartbleed&#8221; Internet Security Flaw</a></strong>Here is what you need to know to understand the problem and how to respond</center> </p>
<p><em>Apr 10, 2014 | Wendy M. Grossman, founder and former editor of the magazine &#8220;The Skeptic&#8221;</em></p>
<p>Consumers used to waking up every week or so to news of yet another Internet security hole or data breach may be hard-pressed to understand why Heartbleed, the hole in the commonly used Web security software OpenSSL, is different. But it is: Such diverse and nonalarmist security commentators as Bruce Schneier, along with the Electronic Frontier Foundation and Ars Technica, have all dubbed the bug &#8220;catastrophic.&#8221;</p>
<p>&#8220;On the scale of 1 to 10, this is an 11,&#8221; Schneier wrote on his blog yesterday.</p>
<p>So: What is it? How do you know if it affects you? What should you do about it?</p>
<p>SSL—for Secure Sockets Layer—is a protocol used ubiquitously on the Web to protect confidential user information in transit. This includes, but is not limited to, user IDs and passwords, credit card details, and other personal information. When you see HTTPS at the beginning of the address in your browser&#8217;s address bar, that syntax indicates that SSL is in use to encrypt the traffic between your computer and the Web server at the other end. Increased used of SSL to protect the queries and messages users type into search engines, Webmail, and social networks so they cannot be read in transit has been an important part of the Web&#8217;s response to Edward Snowden&#8217;s revelations of endemic National Security Agency spying on Internet traffic.</p></blockquote>
<p><a href="http://www.scientificamerican.com/article/the-heartbleed-internet-security-flaw-what-you-need-to-know/?&#038;WT.mc_id=SA_WR_20140416" rel="nofollow">More</a>, from Scientific American.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: podrock</title>
		<link>https://habitablezone.com/2014/04/09/the-heartbleed-crypto-bug/#comment-30380</link>
		<dc:creator>podrock</dc:creator>
		<pubDate>Wed, 09 Apr 2014 23:14:18 +0000</pubDate>
		<guid isPermaLink="false">http://habitablezone.com/?p=44334#comment-30380</guid>
		<description>Especially for mods, as you point out.</description>
		<content:encoded><![CDATA[<p>Especially for mods, as you point out.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: bowser</title>
		<link>https://habitablezone.com/2014/04/09/the-heartbleed-crypto-bug/#comment-30378</link>
		<dc:creator>bowser</dc:creator>
		<pubDate>Wed, 09 Apr 2014 19:36:24 +0000</pubDate>
		<guid isPermaLink="false">http://habitablezone.com/?p=44334#comment-30378</guid>
		<description>Whatever you are most comfortable with.</description>
		<content:encoded><![CDATA[<p>Whatever you are most comfortable with.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: ER</title>
		<link>https://habitablezone.com/2014/04/09/the-heartbleed-crypto-bug/#comment-30377</link>
		<dc:creator>ER</dc:creator>
		<pubDate>Wed, 09 Apr 2014 18:48:22 +0000</pubDate>
		<guid isPermaLink="false">http://habitablezone.com/?p=44334#comment-30377</guid>
		<description>I simply don&#039;t perceive it to be a problem.  I don&#039;t possess any information that would make me a target of surveillance, and if I did, I certainly wouldn&#039;t be transmitting it on the ether anyway.

Besides, any government sinister enough to spy on its citizens surreptitiously and illegally would be perfectly capable of simply fabricating any lies it wanted to pin on them anyway.  I&#039;m not worried about people reading my mail when they already have perfected the means to forge my signature.  

Sure, security is important.  No one wants their credit card numbers to be made public, or have criminals learn their bank account passwords, or for their internet porn browsing habits to be exposed. But most of this hysteria about security is based on an exaggerated feeling of the importance on our own activities.  Even the constitutional aspects of privacy meant little to our founders.  Except for the 4th amendment, there is little mention of it in our Constitution or in the Catalogue of Usurpations of the Declaration of Independence.  As for those protections in the Fourth, its pretty clear they refer primarily to the  reluctance of 18th century Gentlemen Of Property to having the King&#039;s tax collectors snooping through their books.  In the 18th century, (just as today) privacy was a luxury of the rich. Besides, Uncle Sam already knows how much money I make and how much I have stashed away.

I don&#039;t mean to be cavalier about privacy and security, I certainly don&#039;t want my wife to learn of my  torrid affair with Scarlett Johansson. Its just that I am not quite as sensitive of my personal information (or perhaps the ability of others to review it) as other folks are.  My secret life is quite boring. 

What I am really concerned about is the ability of my consumer behavior to be monitored, analyzed and then exploited with targeted advertising. When I browse a website on say, Civil War re-enactments, I am not happy to suddenly see myself on the mailing list of merchants providing those folks with memorabilia and merchandise. This consumer espionage is not an assault on my individual privacy as much as it is an attack on our &lt;em&gt;collective&lt;/em&gt; privacy.  When merchants have the ability to learn more about me than I can about them, it perverts the free market for all of us.  They have intelligence they can use against us, and we have none allowing us to defend ourselves against them. Free markets don&#039;t work when one side has more information than the other.</description>
		<content:encoded><![CDATA[<p>I simply don&#8217;t perceive it to be a problem.  I don&#8217;t possess any information that would make me a target of surveillance, and if I did, I certainly wouldn&#8217;t be transmitting it on the ether anyway.</p>
<p>Besides, any government sinister enough to spy on its citizens surreptitiously and illegally would be perfectly capable of simply fabricating any lies it wanted to pin on them anyway.  I&#8217;m not worried about people reading my mail when they already have perfected the means to forge my signature.  </p>
<p>Sure, security is important.  No one wants their credit card numbers to be made public, or have criminals learn their bank account passwords, or for their internet porn browsing habits to be exposed. But most of this hysteria about security is based on an exaggerated feeling of the importance on our own activities.  Even the constitutional aspects of privacy meant little to our founders.  Except for the 4th amendment, there is little mention of it in our Constitution or in the Catalogue of Usurpations of the Declaration of Independence.  As for those protections in the Fourth, its pretty clear they refer primarily to the  reluctance of 18th century Gentlemen Of Property to having the King&#8217;s tax collectors snooping through their books.  In the 18th century, (just as today) privacy was a luxury of the rich. Besides, Uncle Sam already knows how much money I make and how much I have stashed away.</p>
<p>I don&#8217;t mean to be cavalier about privacy and security, I certainly don&#8217;t want my wife to learn of my  torrid affair with Scarlett Johansson. Its just that I am not quite as sensitive of my personal information (or perhaps the ability of others to review it) as other folks are.  My secret life is quite boring. </p>
<p>What I am really concerned about is the ability of my consumer behavior to be monitored, analyzed and then exploited with targeted advertising. When I browse a website on say, Civil War re-enactments, I am not happy to suddenly see myself on the mailing list of merchants providing those folks with memorabilia and merchandise. This consumer espionage is not an assault on my individual privacy as much as it is an attack on our <em>collective</em> privacy.  When merchants have the ability to learn more about me than I can about them, it perverts the free market for all of us.  They have intelligence they can use against us, and we have none allowing us to defend ourselves against them. Free markets don&#8217;t work when one side has more information than the other.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: DanS</title>
		<link>https://habitablezone.com/2014/04/09/the-heartbleed-crypto-bug/#comment-30376</link>
		<dc:creator>DanS</dc:creator>
		<pubDate>Wed, 09 Apr 2014 18:27:08 +0000</pubDate>
		<guid isPermaLink="false">http://habitablezone.com/?p=44334#comment-30376</guid>
		<description>Then again, it&#039;s not my site, and I&#039;ve been told by my sons that I&#039;m entirely too trusting.

I say go for it.</description>
		<content:encoded><![CDATA[<p>Then again, it&#8217;s not my site, and I&#8217;ve been told by my sons that I&#8217;m entirely too trusting.</p>
<p>I say go for it.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
