[Year 12 IT Apps] Data security - Heartbleed

[Roland Gesthuizen]

I found a cute Chromebleed addon that can alert when you attempt to browse a site affected by the Heartbleed bug. I checked several domains that I use including http://www.dltv.vic.edu.au and all were fixed apart from one that friend maintains so I sent him an alert. Good that the OpenSSL patches were rolled out so quickly. Probably a problem now just for users with legacy systems (anybody still running XP? ;-)

Vulnerability of larger systems is a function of their complexity so any sufficiently complex system can become too chaotic to manage. Kind of the philosophy behind the Google, Apple etc pitch for simple designs that can scale well. 

Nice XKCD cartoon Mark :-)

Regards Roland

On 10 Apr 2014, at 10:50 am, Mark <mark at vceit.com> wrote:

> O dear o dear...
> 
> www.smh.com.au/it-pro/security-it/web-security-in-doubt-after-discovery-of-heartbleed-flaw-20140409-zqsif.html
> 
> http://imgs.xkcd.com/comics/heartbleed.png
> 
> Check a domain for Heartbleed vulnerability
> http://filippo.io/Heartbleed/
> 
> -- 
> 
> Mark Kelly
> mark AT vceit DOT com
> http://vceit.com
> 
> Everything that used to be a sin is now a disease - Bill Maher 
> 
> _______________________________________________
> http://www.edulists.com.au - FAQ, resources, subscribe, unsubscribe
> IT Applications Mailing List kindly supported by
> http://www.vcaa.vic.edu.au/vce/studies/infotech/itapplications3-4.html - Victorian Curriculum and Assessment Authority <br>
> http://www.vitta.org.au  - VITTA Victorian Information Technology Teachers Association Inc <br>
> http://www.swinburne.edu.au/ict/schools - Swinburne University

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.edulists.com.au/pipermail/itapps/attachments/20140410/4453cb14/attachment.html