<http://schema.org/articleBody>
"Multiple popular websites were exposed to a major Internet bug called Heartbleed earlier this week. The bug was discovered by a member of Google's security team and the software security firm Codenomicon.\nHeartbleed is a serious security threat that has the potential to expose users' private information, including passwords, financial details and instant messages, among other things. \nSee also: How to Protect Yourself From the Heartbleed Bug\nTo help you understand the bug and what you should be doing to protect your information, Mashable editor-at-large Lance Ulanoff answered user questions on our Facebook page. Here are highlights from the chat:\nWhat is Heartbleed?\nHeartbleed is a bug in the code running on the servers of millions of websites. It leaves open a hole that allows hackers to get in and around the encryption between you and the site. This means that the information stored on the servers, and passed between you, could be stolen.\n Is this strictly a threat that is only on the Internet?\nJust the Internet: Sites running OpenSSL.\nIs Heartbleed a virus?\nNot exactly. It is a hole that could leave websites and user information open to attack.\nWhy wasn't it discovered until now?\nThe code error was small. It was not an attack; it was simply some bad code written by the people who built OpenSSL. It sounds like more of an accident.\nHas a list of the major sites using OpenSSL been compiled?\nThere are millions of sites that use OpenSSL, so a full list might not be that easy to peruse. LastPass unveiled a tool to help you search for specific websites to find out if there are issues. [Update: We've compiled a list of popular sites and whether they were affected.]\nWhen should we change our passwords?\nChanging passwords right now might be a pointless exercise. The sites you visit could still have the vulnerability and your new password could be stolen.\nIf I'm running my own website, how do I protect it?\nIf you run OpenSSL, update it as soon as possible.\nHas it affected most firewalls?\nIt's not really a firewall attack. If the vulnerability exists (on a site or service), the communication between you and it is open to compromise.\nHow safe is the Internet anymore?\nIt's pretty safe.\nDo you think the latest bug was somehow related to the NSA?\nNo.\nHave something to add to this story? Share it in the comments.\nBONUS: What Is the Heartbleed Bug?\n"^^<http://www.w3.org/2001/XMLSchema#string>
<http://mashable.com/2014/04/09/heartbleed-questions-answered/>