0

Geni hits as possible vulnerable to Heartbleed

Thomas Edward Shirley

April 10, 2014 20:10

None

Follow

Geni hits as possible vulnerable to Heartbleed.

 

Have holes been addressed?  Do we need to change passwords?

1 comment

• 0
  
  Geni Support Team April 14, 2014 19:29

  Last week it was announced that a vulnerability exists in the most popular encryption library used by web sites around the world.  This bug allowed a hacker to peek into the encryption system's memory, perhaps getting a look at a user's unencrypted data (a password, credit card, etc.) or even the private key that the computer uses to encrypt and decrypt data.  

  Within hours of the vulnerability being made public, Geni's operations team updated the encryption libraries on all of our servers and installed new SSL certificates in the unlikely event that our old certificate was compromised.

  We have no evidence that Geni was targeted by anyone who was aware of the bug or that any encrypted information was revealed.  We do recommend, however, that anyone concerned about this bug should change their Geni password as a precaution, at

   https://www.geni.com/account_settings/email_password