by Danielle Bringard, Associate Survey & Symposium Editor<\/p>\n
<\/p>\n
I don\u2019t know about you, but my heart skipped several beats after reading the first wave of news detailing the Heartbleed Security Hack.\u00a0 I changed all of my passwords on various sites only to find if I had changed them before that particular web operation had updated its software I would have to change my passwords again.\u00a0 Now, I find, by checking the security of a website I may be violating the law?<\/p>\n
Heartbleed is not a virus, but a software defect.[1]<\/a>\u00a0 It affects OpenSSL software which is used for encryption.[2]<\/a>\u00a0 OpenSSL is an open source software, meaning anyone can access the code, review it, and make changes to it.[3]<\/a>\u00a0 So what happens when Heartbleed is exploited?\u00a0 Essentially it allows a hacker to retrieve memory which may contain usernames, passwords, keys, credit card numbers, social security numbers or other useful information.[4]<\/a>\u00a0 Each time the hacker access the system it he or she can gain access to more information.[5]<\/a>\u00a0 This is a serious problem as many people now do much of their banking and shopping on the internet.<\/p>\n \u00a0So before you change your passwords it might be a good idea to check to see if the website is still vulnerable.\u00a0 If the website hasn\u2019t patched its software then changing your password will do you no good.\u00a0 McAfee released a free tool to help consumers determine if the website they visit is safe or not.[6]<\/a>\u00a0 That tool can be accessed at http:\/\/tif.mcafee.com\/heartbleedtest<\/a>.\u00a0<\/p>\n \u00a0STOP!\u00a0 Before you click that link and test a website you have in mind, you should know that some technology experts are worried that doing so could break the law.[7]<\/a>\u00a0 These naysayers cite the United States Computer Fraud and Abuse Act.[8]<\/a>\u00a0 Software that checks a website to see if it has patched the Heartbleed actually accesses that sites security certificate, which may or may not fall under the purview of 18 U.S.C. \u00a71030.\u00a0 Since everyone across the globe is experiencing the effects of Heartbleed, and it may take some time before all websites have patched their software[9]<\/a>, I doubt the U.S. government would prosecute a citizen simply seeking to ensure their person information remained protected or taking any proactive steps to do so.<\/p>\n As always, safety first.\u00a0<\/p>\n [1]<\/a> James Lyne, How Heartbleed Happened the NSA and Proof Heartbleed Can Do Real Damage, <\/i>Forbes (Mar. 14, 2014, 9:27 AM), available at<\/i> http:\/\/www.forbes.com\/sites\/jameslyne\/2014\/04\/14\/how-heartbleed-happened-the-nsa-and-proof-heartbleed-can-do-real-damage\/.<\/p>\n<\/div>\n [2]<\/a> Id.<\/i><\/p>\n<\/div>\n [3]<\/a> Id.<\/i>\u00a0<\/p>\n<\/div>\n [4]<\/a> James Lyne, Heartbeat Heartbleed Bug Breaks Worldwide Internet Security Again (And Yahoo)<\/i>, Forbes (Mar. 8, 2014, 11:39 PM), available at<\/i> http:\/\/www.forbes.com\/sites\/jameslyne\/2014\/04\/08\/heartbeat-heartbleed-bug-breaks-worldwide-internet-security-again-and-yahoo\/; Craig Timberg, Heartbleed Bug Puts the Chaotic Nature of the Internet Under the Magnifying Glass<\/i>, Wash. Post (April 9, 2014), available at <\/i>http:\/\/www.washingtonpost.com\/business\/technology\/heartbleed-bug-puts-the-chaotic-nature-of-the-internet-under-the-magnifying-glass\/2014\/04\/09\/00f7064c-c00b-11e3-bcec-b71ee10e9bc3_story.html.<\/p>\n<\/div>\n [5]<\/a> Lyne, Heartbeat Heartbleed<\/i> supra<\/i> note 4.\u00a0<\/p>\n<\/div>\n
\n