Just wanted to pass this along to you guys. Not sure if you're aware, but one of the biggest exploits (codename: ) in recent times was found this past week with OpenSSL. Audits have revealed that the vulnerability was active for at least five months before it was discovered and published. This piece of software is responsible for the "https://" you see in your address bar when visiting a secure site.
I've been fixing vulnerable servers at work and my boss and I came across this list of sites that are still vulnerable.
https://github.com/musalbas/heartbleed- ... op1000.txtIf you use one of those sites (and even ones that are no longer vulnerable...like Google, Facebook, etc) you should change your password.
Just FYI. Knowledge is power...and all that.
![Thumbs Up :thumbsup:](./images/smilies/thumbs.gif)