Patching Heartbleed, a major Web security wound
Patching Heartbleed, a major Web security wound
2:54

Patching Heartbleed, a major Web security wound

Culture
On the internet, things are not always as secure as they seem. On the internet, things are not always as secure as they seem. I am Bridget Carey and this is your CNET update. I am Bridget Carey and this is your CNET update. [MUSIC]. [MUSIC]. Folks we have to have a talk about heart bleed. Folks we have to have a talk about heart bleed. It's a cool sounding name given to a serious security flaw, that many major websites are scrambling to fix, including Amazon, Yahoo and Google, and it means we will have to refresh our passwords for many websites. It's a cool sounding name given to a serious security flaw, that many major websites are scrambling to fix, including Amazon, Yahoo and Google, and it means we will have to refresh our passwords for many websites. Explaining heart bleed can get pretty technical. Explaining heart bleed can get pretty technical. But here's a simple way to think about it. But here's a simple way to think about it. When you're on a website entering in your secure information like a password or credit card info, there's a little padlock icon near the URL to let you know the website is encrypted and your data is private. When you're on a website entering in your secure information like a password or credit card info, there's a little padlock icon near the URL to let you know the website is encrypted and your data is private. Well, there's this open-source system that many sites. Well, there's this open-source system that many sites. Have been using for encryption. Have been using for encryption. It's called Open SSL, and it had a leak. It's called Open SSL, and it had a leak. Someone could trick a server into sharing the encrypted data, and even share the keys to unlock the encryption. Someone could trick a server into sharing the encrypted data, and even share the keys to unlock the encryption. It's believed that about 2 3rds of websites were vulnerable to this flawed security system. It's believed that about 2 3rds of websites were vulnerable to this flawed security system. And what's worse, is that the problem has existed for the past two years and security experts had no idea. And what's worse, is that the problem has existed for the past two years and security experts had no idea. If someone has been taking advantage of this bug to steal info, it leaves no trace. If someone has been taking advantage of this bug to steal info, it leaves no trace. There are no fingerprints left behind, so websites don't even know if they were compromised. There are no fingerprints left behind, so websites don't even know if they were compromised. That's comforting. That's comforting. So what can you do? So what can you do? I mean, besides get angry at the internet. I mean, besides get angry at the internet. Well, the smart thing to do is to wait for website to announce that they have patched the problem. Well, the smart thing to do is to wait for website to announce that they have patched the problem. Then you can change your passwords. Then you can change your passwords. Big sites like Yahoo and Google have fixed the issue, but not all smaller sites may have plugged the leak just yet. Big sites like Yahoo and Google have fixed the issue, but not all smaller sites may have plugged the leak just yet. Also, keep a close eye on your banking statements for any fraudulent activity. Also, keep a close eye on your banking statements for any fraudulent activity. Which you should always do anyway. Which you should always do anyway. Let's move on to a different kind of privacy. Let's move on to a different kind of privacy. Facebook privacy. Facebook privacy. The social network has admitted that sometimes its privacy settings can be confusing. The social network has admitted that sometimes its privacy settings can be confusing. So it's making some changes. So it's making some changes. If you haven't touched your privacy settings in a while, you'll get a popup With a little dinosaur asking you to double check your settings in case you didn't realize you've been making all your posts public. If you haven't touched your privacy settings in a while, you'll get a popup With a little dinosaur asking you to double check your settings in case you didn't realize you've been making all your posts public. And on the Facebook IOS app, you may have noticed that the audience selector which was on the lower-right corner is now clearly visible on the top of your status form. And on the Facebook IOS app, you may have noticed that the audience selector which was on the lower-right corner is now clearly visible on the top of your status form. Facebook will also add more descriptions on what public means, on the desktop drop-down menu. Facebook will also add more descriptions on what public means, on the desktop drop-down menu. And, as more of us watch video online and cut the cable subscription, there's another streaming video option making its debut. And, as more of us watch video online and cut the cable subscription, there's another streaming video option making its debut. Sesame Street Go, offers on-demand access to hundreds of full length episodes of the classic children's program. Sesame Street Go, offers on-demand access to hundreds of full length episodes of the classic children's program. And, it can be accessed on any device at sesamego.com. And, it can be accessed on any device at sesamego.com. Sesame Street Go is brought to you by the number four because it'll cost you $4 a month. Sesame Street Go is brought to you by the number four because it'll cost you $4 a month. That's your tech news update. That's your tech news update. Head to cnet.com for more details on these stories. Head to cnet.com for more details on these stories. From our studios in New York, I'm Bridget Carey. From our studios in New York, I'm Bridget Carey. [SOUND] [SOUND] On the internet, things are not always as secure as they seem. On the internet, things are not always as secure as they seem. I am Bridget Carey and this is your CNET update. I am Bridget Carey and this is your CNET update. [MUSIC]. [MUSIC]. Folks we have to have a talk about heart bleed. Folks we have to have a talk about heart bleed. It's a cool sounding name given to a serious security flaw, that many major websites are scrambling to fix, including Amazon, Yahoo and Google, and it means we will have to refresh our passwords for many websites. It's a cool sounding name given to a serious security flaw, that many major websites are scrambling to fix, including Amazon, Yahoo and Google, and it means we will have to refresh our passwords for many websites. Explaining heart bleed can get pretty technical. Explaining heart bleed can get pretty technical. But here's a simple way to think about it. But here's a simple way to think about it. When you're on a website entering in your secure information like a password or credit card info, there's a little padlock icon near the URL to let you know the website is encrypted and your data is private. When you're on a website entering in your secure information like a password or credit card info, there's a little padlock icon near the URL to let you know the website is encrypted and your data is private. Well, there's this open-source system that many sites. Well, there's this open-source system that many sites. Have been using for encryption. Have been using for encryption. It's called Open SSL, and it had a leak. It's called Open SSL, and it had a leak. Someone could trick a server into sharing the encrypted data, and even share the keys to unlock the encryption. Someone could trick a server into sharing the encrypted data, and even share the keys to unlock the encryption. It's believed that about 2 3rds of websites were vulnerable to this flawed security system. It's believed that about 2 3rds of websites were vulnerable to this flawed security system. And what's worse, is that the problem has existed for the past two years and security experts had no idea. And what's worse, is that the problem has existed for the past two years and security experts had no idea. If someone has been taking advantage of this bug to steal info, it leaves no trace. If someone has been taking advantage of this bug to steal info, it leaves no trace. There are no fingerprints left behind, so websites don't even know if they were compromised. There are no fingerprints left behind, so websites don't even know if they were compromised. That's comforting. That's comforting. So what can you do? So what can you do? I mean, besides get angry at the internet. I mean, besides get angry at the internet. Well, the smart thing to do is to wait for website to announce that they have patched the problem. Well, the smart thing to do is to wait for website to announce that they have patched the problem. Then you can change your passwords. Then you can change your passwords. Big sites like Yahoo and Google have fixed the issue, but not all smaller sites may have plugged the leak just yet. Big sites like Yahoo and Google have fixed the issue, but not all smaller sites may have plugged the leak just yet. Also, keep a close eye on your banking statements for any fraudulent activity. Also, keep a close eye on your banking statements for any fraudulent activity. Which you should always do anyway. Which you should always do anyway. Let's move on to a different kind of privacy. Let's move on to a different kind of privacy. Facebook privacy. Facebook privacy. The social network has admitted that sometimes its privacy settings can be confusing. The social network has admitted that sometimes its privacy settings can be confusing. So it's making some changes. So it's making some changes. If you haven't touched your privacy settings in a while, you'll get a popup With a little dinosaur asking you to double check your settings in case you didn't realize you've been making all your posts public. If you haven't touched your privacy settings in a while, you'll get a popup With a little dinosaur asking you to double check your settings in case you didn't realize you've been making all your posts public. And on the Facebook IOS app, you may have noticed that the audience selector which was on the lower-right corner is now clearly visible on the top of your status form. And on the Facebook IOS app, you may have noticed that the audience selector which was on the lower-right corner is now clearly visible on the top of your status form. Facebook will also add more descriptions on what public means, on the desktop drop-down menu. Facebook will also add more descriptions on what public means, on the desktop drop-down menu. And, as more of us watch video online and cut the cable subscription, there's another streaming video option making its debut. And, as more of us watch video online and cut the cable subscription, there's another streaming video option making its debut. Sesame Street Go, offers on-demand access to hundreds of full length episodes of the classic children's program. Sesame Street Go, offers on-demand access to hundreds of full length episodes of the classic children's program. And, it can be accessed on any device at sesamego.com. And, it can be accessed on any device at sesamego.com. Sesame Street Go is brought to you by the number four because it'll cost you $4 a month. Sesame Street Go is brought to you by the number four because it'll cost you $4 a month. That's your tech news update. That's your tech news update. Head to cnet.com for more details on these stories. Head to cnet.com for more details on these stories. From our studios in New York, I'm Bridget Carey. From our studios in New York, I'm Bridget Carey. [SOUND] [SOUND]

Up Next

Download Netflix shows to watch offline
ud113016.jpg

Up Next

Download Netflix shows to watch offline

Amazon's next Echo said to come with a screen
ud112916.jpg

Amazon's next Echo said to come with a screen

Curved iPhone 8? Apple said to be exploring OLED screens
ud112816.jpg

Curved iPhone 8? Apple said to be exploring OLED screens

Black Friday and other turkey traditions are evolving
ud1123162.jpg

Black Friday and other turkey traditions are evolving

Facebook drone accident under investigation
ud112216.jpg

Facebook drone accident under investigation

Facebook needs you to fight fake news
ud112116.jpg

Facebook needs you to fight fake news

Airbnb wants to be your travel agent
ud111816.jpg

Airbnb wants to be your travel agent

Wait, how fast can Qualcomm charge a phone?
ud111716.jpg

Wait, how fast can Qualcomm charge a phone?

Snapchat may be worth $30 billion with IPO filing
ud111616.jpg

Snapchat may be worth $30 billion with IPO filing

Nintendo puts a price on Super Mario Run (and the Switch?)
ud1115162.jpg

Nintendo puts a price on Super Mario Run (and the Switch?)

Tech Shows

The Apple Core
apple-core-w

The Apple Core

Alphabet City
alphabet-city-w

Alphabet City

CNET Top 5
cnet-top-5-w

CNET Top 5

The Daily Charge
dc-site-1color-logo.png

The Daily Charge

What the Future
what-the-future-w

What the Future

Tech Today
tech-today-w

Tech Today

Latest News All latest news

300-Mile Honda Prologue EV Hits the Road Next Year
hondapic2

300-Mile Honda Prologue EV Hits the Road Next Year

Meta's Big News: Quest 3, Smart Glasses and AI Celebrities
meta-quest-3-1080-seq-cnet-00-07-15-02-still005

Meta's Big News: Quest 3, Smart Glasses and AI Celebrities

Meta Unveils Custom AI Image Generator and Avatars
pic

Meta Unveils Custom AI Image Generator and Avatars

Watch Everything Announced at Meta Connect 2023
230927-site-meta-connect-supercut-thumbnail

Watch Everything Announced at Meta Connect 2023

Meta Reveals Quest 3 Headset at Connect 2023
meta-quest-3.png

Meta Reveals Quest 3 Headset at Connect 2023

Meta's Ray-Bans, Hands-On: These Glasses Now Stream to Instagram
raybanglassescnet

Meta's Ray-Bans, Hands-On: These Glasses Now Stream to Instagram

Most Popular All most popular

10 Must-Try Hidden iOS 17 Features on Your iPhone
230921-site-ios-17-hidden-features

10 Must-Try Hidden iOS 17 Features on Your iPhone

TV Buying Guide: Sizes, Prices and When to Buy to Get a Good Deal
tv-buying-guide-cnet-seq-00-08-50-25-still008

TV Buying Guide: Sizes, Prices and When to Buy to Get a Good Deal

Amazon Announces New Ring and Blink Cameras for the Home
amazon-reveals-new-ring-and-blink-cameras-00-04-09-02-still001

Amazon Announces New Ring and Blink Cameras for the Home

Amazon Shows Off New Fire TV Soundbar, 4K Stick
amazon-seq-00-00-08-14-still001

Amazon Shows Off New Fire TV Soundbar, 4K Stick

First Look: Microsoft Surface Studio 2 and Surface Go 3 Laptops
surface-laptops-1080-seq-00-05-17-28-still005

First Look: Microsoft Surface Studio 2 and Surface Go 3 Laptops

Surprises From First Days of iPhone 15 and Apple Watch Series 9
230921-site-one-more-thing-revelations-of-the-reviews-2

Surprises From First Days of iPhone 15 and Apple Watch Series 9

Latest Products All latest products

300-Mile Honda Prologue EV Hits the Road Next Year
hondapic2

300-Mile Honda Prologue EV Hits the Road Next Year

Meta's Ray-Bans, Hands-On: These Glasses Now Stream to Instagram
raybanglassescnet

Meta's Ray-Bans, Hands-On: These Glasses Now Stream to Instagram

Vizio's New Quantum Pro TVs Could Be a Strong Value Play
new-vizio-tvs-cnet-00-00-41-11-still001.png

Vizio's New Quantum Pro TVs Could Be a Strong Value Play

Amazon Announces New Ring and Blink Cameras for the Home
amazon-reveals-new-ring-and-blink-cameras-00-04-09-02-still001

Amazon Announces New Ring and Blink Cameras for the Home

Amazon Unveils Echo Pop Kids, Fire HD 10 Kids Tablets for Young Users
cnet-thumbnail-amazonevent-kids-site

Amazon Unveils Echo Pop Kids, Fire HD 10 Kids Tablets for Young Users

Review: The iPhone 15 Pro, 15 Pro Max Are Impressive
iphone15pro-promax-review-clean

Review: The iPhone 15 Pro, 15 Pro Max Are Impressive

Latest How To All how to videos

10 Must-Try Hidden iOS 17 Features on Your iPhone
230921-site-ios-17-hidden-features

10 Must-Try Hidden iOS 17 Features on Your iPhone

How to Record Your Screen in Windows 11
how-to-record-your-screen-in-windows-11-00-00-48-13-still002

How to Record Your Screen in Windows 11

Windows Copilot Preview: How to Manage Your PC With the AI Assistant
copilot-clean

Windows Copilot Preview: How to Manage Your PC With the AI Assistant

How to Build a Portable AC Unit in Minutes
diy-portable-ac-for-youtube-00-02-55-23-still001

How to Build a Portable AC Unit in Minutes

How to Blur Your Home or an Object in Google Maps
how-to-blur-your-house-in-google-maps-1b

How to Blur Your Home or an Object in Google Maps

How to Clone Your Own Voice with AI
230620-site-how-to-make-an-ai-voice-clone

How to Clone Your Own Voice with AI