Reflections on Heartbleed

By Tracy Mitrano. Fascinating how this vulnerability grabbed headlines. Understandable, given that it is about the SSL connection for e-commerce, that it caught attention. Intriguing because it caused users to change passwords. It is notable that the net loss of personally identifiable information was, in fact, only fractional.  Very few, if any, users are likely to have fraud committed as a result of this vulnerability. It hardly rates when compared to full-blown breaches that almost surely have each and every one of our social security numbers for sale on the black market. Read more...