Warning: Heartbleed In OpenSSL--Don't Panic

The Heartbleed security vulnerability seems to be affecting a large portion of sites that use OpenSSL on their platform. If you haven’t already heard of it, here are a few links that explain what Heartbleed is, and how it could expose passwords and other sensitive data, such as credit card information.

Github has a list (last updated 2 hours ago, as I post this) to determine whether or not a particular website is vulnerable to Heartbleed. Dreamwidth has determined that they seem to be okay, and has a good explanation as to what could happen where they’re involved in this dw_maintenance post. I haven’t seen a statement from Livejournal as of yet.

A few tools were posted in this comment that help to determine a site’s vulnerability on an individual basis. If it isn’t vulnerable, feel free to change the passwords if you feel that you need to. If a site I were registered with happened to be affected, the best advice I’ve seen (and that I agree with) is to wait until it is no longer vulnerable.