Overclock.net › Forums › Software, Programming and Coding › Networking & Security › Are you changing passwords in response to heartbleed?
New Posts  All Forums:Forum Nav:

Are you changing passwords in response to heartbleed? - Page 2

Poll Results: Are you changing your passwords?

 
  • 17% (3)
    Yes.
  • 17% (3)
    On Select sites and services only
  • 64% (11)
    No.
17 Total Votes  
post #11 of 26
LastPass works quite well. I use it, and it integrates quite nicely into the browser.
My Rig
(17 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 3570k Asus P8Z77-M Galaxy GTX 670 2GB GC Corsair 8GB DDR3 1600mhz 
Hard DriveOptical DriveCoolingOS
Seagate Barracuda 2TB Samsung SH-224BB Coolermaster Hyper 212 EVO Windows 7 64-bit 
MonitorKeyboardPowerCase
BenQ XL2420T Coolermaster Quickfire Pro Cherry Blue Mechanic... Antec HCG 520W Modular Power Supply Fractal Design Define XL R2 Black Pearl 
MouseMouse PadAudioAudio
Logitech G600 SteelSeries Qck Audio Technica ATH-AD700 Graham Slee Voyager Amplifier 
Audio
Asus Xonar Essence ST 
  hide details  
Reply
My Rig
(17 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 3570k Asus P8Z77-M Galaxy GTX 670 2GB GC Corsair 8GB DDR3 1600mhz 
Hard DriveOptical DriveCoolingOS
Seagate Barracuda 2TB Samsung SH-224BB Coolermaster Hyper 212 EVO Windows 7 64-bit 
MonitorKeyboardPowerCase
BenQ XL2420T Coolermaster Quickfire Pro Cherry Blue Mechanic... Antec HCG 520W Modular Power Supply Fractal Design Define XL R2 Black Pearl 
MouseMouse PadAudioAudio
Logitech G600 SteelSeries Qck Audio Technica ATH-AD700 Graham Slee Voyager Amplifier 
Audio
Asus Xonar Essence ST 
  hide details  
Reply
post #12 of 26
Thread Starter 
Wouldn't it be riskier to have all your passwords on a single service with a master password? Once that master password is cracked you're basically done.
Sunkissed Beauty
(26 items)
 
Quirky
(12 items)
 
CPUMotherboardGraphicsRAM
Intel Core i7 3770K [ 4.5Ghz | 1.370V ] AsRock Z77 OC Formula ASUS GTX 760 DC2OC-2GD5 [ 1202/3506 ] Crucial Ballistix Elite 16GB 1866Mhz CL9 1.5V [... 
Hard DriveHard DriveHard DriveHard Drive
Crucial MX100 256GB Western Digital Caviar Blue 500GB [ WD5000AAKX ] Western Digital Caviar Blue 1TB [ WD10EZEX ] Western Digital Caviar Green 1TB [ WD10EARS ] 
Hard DriveCoolingCoolingCooling
Western Digital Caviar Green 1TB [ WD10EARS ] Corsair H100i Push&Pull Corsair SP120L PWM [ 2X] [ H100i ] Corsair SP120 PWM High Peformance [ 2X ][ H100 i] 
CoolingCoolingOSMonitor
NZXT FN 140RB [4X][Case] Cooler Master Sickleflow 120 Red [ 2X ][ Case ] Windows 10 Pro x64 Samsung B2230 
KeyboardPowerCaseMouse
Corsair Vengeance K95 RGB [ MX Brown ] Seasonic X760 NZXT Swtich 810 Black Logitech G402 
Mouse PadAudioAudioAudio
Razer Goliathus Alpha Control / Steelseries Qck... Sennheiser HD 429 Creative Inspire T7900 ASUS Xonar DGX 
OtherOther
NZXT Sentry LX NZXT Sleeved LED Kit | Orange 2M 
CPUMotherboardGraphicsOptical Drive
Intel Pentium Dual-Core E2200 MSI 945GCM5-F V2 (FSB 1333) Inno3D Nvidia GeForce GTS 450 1GB (Cooler Ripoff) Benq DVD-R,CD-R,DVD-ROM,CD-ROM 
CoolingMonitorKeyboardPower
Intel Stock Fan MAG InnoVision 770FS Logitech Internet Pro AcBel R8 PowerII 650W 80+ 
CaseMouseMouse PadAudio
Vertu Santa Fe "Blue" Logitech Internet Pro CM Storm Pad Sound Blaster Audigy 2 ZS 
  hide details  
Reply
Sunkissed Beauty
(26 items)
 
Quirky
(12 items)
 
CPUMotherboardGraphicsRAM
Intel Core i7 3770K [ 4.5Ghz | 1.370V ] AsRock Z77 OC Formula ASUS GTX 760 DC2OC-2GD5 [ 1202/3506 ] Crucial Ballistix Elite 16GB 1866Mhz CL9 1.5V [... 
Hard DriveHard DriveHard DriveHard Drive
Crucial MX100 256GB Western Digital Caviar Blue 500GB [ WD5000AAKX ] Western Digital Caviar Blue 1TB [ WD10EZEX ] Western Digital Caviar Green 1TB [ WD10EARS ] 
Hard DriveCoolingCoolingCooling
Western Digital Caviar Green 1TB [ WD10EARS ] Corsair H100i Push&Pull Corsair SP120L PWM [ 2X] [ H100i ] Corsair SP120 PWM High Peformance [ 2X ][ H100 i] 
CoolingCoolingOSMonitor
NZXT FN 140RB [4X][Case] Cooler Master Sickleflow 120 Red [ 2X ][ Case ] Windows 10 Pro x64 Samsung B2230 
KeyboardPowerCaseMouse
Corsair Vengeance K95 RGB [ MX Brown ] Seasonic X760 NZXT Swtich 810 Black Logitech G402 
Mouse PadAudioAudioAudio
Razer Goliathus Alpha Control / Steelseries Qck... Sennheiser HD 429 Creative Inspire T7900 ASUS Xonar DGX 
OtherOther
NZXT Sentry LX NZXT Sleeved LED Kit | Orange 2M 
CPUMotherboardGraphicsOptical Drive
Intel Pentium Dual-Core E2200 MSI 945GCM5-F V2 (FSB 1333) Inno3D Nvidia GeForce GTS 450 1GB (Cooler Ripoff) Benq DVD-R,CD-R,DVD-ROM,CD-ROM 
CoolingMonitorKeyboardPower
Intel Stock Fan MAG InnoVision 770FS Logitech Internet Pro AcBel R8 PowerII 650W 80+ 
CaseMouseMouse PadAudio
Vertu Santa Fe "Blue" Logitech Internet Pro CM Storm Pad Sound Blaster Audigy 2 ZS 
  hide details  
Reply
post #13 of 26
I wouldn't change your passwords until you know the relevant website has been patched. theres no point changing it if the site is still vulnerable, it just means your new password could still be stolen.

you can check the sites you use with this tool someone put up - https://filippo.io/Heartbleed/

It's not 100% accurate, but gives a good idea if the sites you use are vulnerable. Just remember to use a secure link in the site you use to test it (HTTPS)

Only change your passwords AFTER the site has updated OpenSSL, if it's been affected with the bug.

Just my 2p's worth. smile.gif
post #14 of 26
I voted Yes, but on this topic laziness has a death grip on me and I currently can't bring myself to do it. I'll eventually use KeePass for all website passwords so that everything will have a unique password without much organizational work involved.

About that website latelesley linked to, there's also addons for Firefox (and surely also Chrome) that check on this so that you'll see where it's useless to do while normally browsing around.
post #15 of 26
Quote:
Originally Posted by Speedster159 View Post

Wouldn't it be riskier to have all your passwords on a single service with a master password? Once that master password is cracked you're basically done.

That is why you use multi-factor authentication smile.gif.

To access my LastPass account you need my username and master password and my YubiKey.
post #16 of 26
Thread Starter 
Quote:
Originally Posted by Bitemarks and bloodstains View Post

Quote:
Originally Posted by Speedster159 View Post

Wouldn't it be riskier to have all your passwords on a single service with a master password? Once that master password is cracked you're basically done.

That is why you use multi-factor authentication smile.gif.

To access my LastPass account you need my username and master password and my YubiKey.
Those options are paid.. Not exactly free.
Sunkissed Beauty
(26 items)
 
Quirky
(12 items)
 
CPUMotherboardGraphicsRAM
Intel Core i7 3770K [ 4.5Ghz | 1.370V ] AsRock Z77 OC Formula ASUS GTX 760 DC2OC-2GD5 [ 1202/3506 ] Crucial Ballistix Elite 16GB 1866Mhz CL9 1.5V [... 
Hard DriveHard DriveHard DriveHard Drive
Crucial MX100 256GB Western Digital Caviar Blue 500GB [ WD5000AAKX ] Western Digital Caviar Blue 1TB [ WD10EZEX ] Western Digital Caviar Green 1TB [ WD10EARS ] 
Hard DriveCoolingCoolingCooling
Western Digital Caviar Green 1TB [ WD10EARS ] Corsair H100i Push&Pull Corsair SP120L PWM [ 2X] [ H100i ] Corsair SP120 PWM High Peformance [ 2X ][ H100 i] 
CoolingCoolingOSMonitor
NZXT FN 140RB [4X][Case] Cooler Master Sickleflow 120 Red [ 2X ][ Case ] Windows 10 Pro x64 Samsung B2230 
KeyboardPowerCaseMouse
Corsair Vengeance K95 RGB [ MX Brown ] Seasonic X760 NZXT Swtich 810 Black Logitech G402 
Mouse PadAudioAudioAudio
Razer Goliathus Alpha Control / Steelseries Qck... Sennheiser HD 429 Creative Inspire T7900 ASUS Xonar DGX 
OtherOther
NZXT Sentry LX NZXT Sleeved LED Kit | Orange 2M 
CPUMotherboardGraphicsOptical Drive
Intel Pentium Dual-Core E2200 MSI 945GCM5-F V2 (FSB 1333) Inno3D Nvidia GeForce GTS 450 1GB (Cooler Ripoff) Benq DVD-R,CD-R,DVD-ROM,CD-ROM 
CoolingMonitorKeyboardPower
Intel Stock Fan MAG InnoVision 770FS Logitech Internet Pro AcBel R8 PowerII 650W 80+ 
CaseMouseMouse PadAudio
Vertu Santa Fe "Blue" Logitech Internet Pro CM Storm Pad Sound Blaster Audigy 2 ZS 
  hide details  
Reply
Sunkissed Beauty
(26 items)
 
Quirky
(12 items)
 
CPUMotherboardGraphicsRAM
Intel Core i7 3770K [ 4.5Ghz | 1.370V ] AsRock Z77 OC Formula ASUS GTX 760 DC2OC-2GD5 [ 1202/3506 ] Crucial Ballistix Elite 16GB 1866Mhz CL9 1.5V [... 
Hard DriveHard DriveHard DriveHard Drive
Crucial MX100 256GB Western Digital Caviar Blue 500GB [ WD5000AAKX ] Western Digital Caviar Blue 1TB [ WD10EZEX ] Western Digital Caviar Green 1TB [ WD10EARS ] 
Hard DriveCoolingCoolingCooling
Western Digital Caviar Green 1TB [ WD10EARS ] Corsair H100i Push&Pull Corsair SP120L PWM [ 2X] [ H100i ] Corsair SP120 PWM High Peformance [ 2X ][ H100 i] 
CoolingCoolingOSMonitor
NZXT FN 140RB [4X][Case] Cooler Master Sickleflow 120 Red [ 2X ][ Case ] Windows 10 Pro x64 Samsung B2230 
KeyboardPowerCaseMouse
Corsair Vengeance K95 RGB [ MX Brown ] Seasonic X760 NZXT Swtich 810 Black Logitech G402 
Mouse PadAudioAudioAudio
Razer Goliathus Alpha Control / Steelseries Qck... Sennheiser HD 429 Creative Inspire T7900 ASUS Xonar DGX 
OtherOther
NZXT Sentry LX NZXT Sleeved LED Kit | Orange 2M 
CPUMotherboardGraphicsOptical Drive
Intel Pentium Dual-Core E2200 MSI 945GCM5-F V2 (FSB 1333) Inno3D Nvidia GeForce GTS 450 1GB (Cooler Ripoff) Benq DVD-R,CD-R,DVD-ROM,CD-ROM 
CoolingMonitorKeyboardPower
Intel Stock Fan MAG InnoVision 770FS Logitech Internet Pro AcBel R8 PowerII 650W 80+ 
CaseMouseMouse PadAudio
Vertu Santa Fe "Blue" Logitech Internet Pro CM Storm Pad Sound Blaster Audigy 2 ZS 
  hide details  
Reply
post #17 of 26
There is also grid authenication.

You also have Google authenticator, Toopher, Duo Security and Transackt multi-factor options.
post #18 of 26
Quote:
Originally Posted by Speedster159 View Post

Those options are paid.. Not exactly free.

There are other programs like KeePass that are just a normal program installed on your PC without a server on the Internet saving a copy of your passwords. This means you don't have to worry about anyone stealing access to your LastPass account and won't have to think about two-pass authentication as there's not server used anywhere. With KeePass, you instead have to worry about local stuff going wrong. A virus or malware could theoretically get to your password database, upload that somewhere, and then use a key-logger to steal the master password for that database.

On a tool like KeePass, to share things with your phone or different PCs, you'll have to manually sync the database files (though I think there's also some somewhat automatic options somewhere which help to do that).
post #19 of 26
Thread Starter 
Quote:
Originally Posted by deepor View Post

Quote:
Originally Posted by Speedster159 View Post

Those options are paid.. Not exactly free.

There are other programs like KeePass that are just a normal program installed on your PC without a server on the Internet saving a copy of your passwords. This means you don't have to worry about anyone stealing access to your LastPass account and won't have to think about two-pass authentication as there's not server used anywhere. With KeePass, you instead have to worry about local stuff going wrong. A virus or malware could theoretically get to your password database, upload that somewhere, and then use a key-logger to steal the master password for that database.

On a tool like KeePass, to share things with your phone or different PCs, you'll have to manually sync the database files (though I think there's also some somewhat automatic options somewhere which help to do that).
So what you're saying there is really no safe way to store it?
Sunkissed Beauty
(26 items)
 
Quirky
(12 items)
 
CPUMotherboardGraphicsRAM
Intel Core i7 3770K [ 4.5Ghz | 1.370V ] AsRock Z77 OC Formula ASUS GTX 760 DC2OC-2GD5 [ 1202/3506 ] Crucial Ballistix Elite 16GB 1866Mhz CL9 1.5V [... 
Hard DriveHard DriveHard DriveHard Drive
Crucial MX100 256GB Western Digital Caviar Blue 500GB [ WD5000AAKX ] Western Digital Caviar Blue 1TB [ WD10EZEX ] Western Digital Caviar Green 1TB [ WD10EARS ] 
Hard DriveCoolingCoolingCooling
Western Digital Caviar Green 1TB [ WD10EARS ] Corsair H100i Push&Pull Corsair SP120L PWM [ 2X] [ H100i ] Corsair SP120 PWM High Peformance [ 2X ][ H100 i] 
CoolingCoolingOSMonitor
NZXT FN 140RB [4X][Case] Cooler Master Sickleflow 120 Red [ 2X ][ Case ] Windows 10 Pro x64 Samsung B2230 
KeyboardPowerCaseMouse
Corsair Vengeance K95 RGB [ MX Brown ] Seasonic X760 NZXT Swtich 810 Black Logitech G402 
Mouse PadAudioAudioAudio
Razer Goliathus Alpha Control / Steelseries Qck... Sennheiser HD 429 Creative Inspire T7900 ASUS Xonar DGX 
OtherOther
NZXT Sentry LX NZXT Sleeved LED Kit | Orange 2M 
CPUMotherboardGraphicsOptical Drive
Intel Pentium Dual-Core E2200 MSI 945GCM5-F V2 (FSB 1333) Inno3D Nvidia GeForce GTS 450 1GB (Cooler Ripoff) Benq DVD-R,CD-R,DVD-ROM,CD-ROM 
CoolingMonitorKeyboardPower
Intel Stock Fan MAG InnoVision 770FS Logitech Internet Pro AcBel R8 PowerII 650W 80+ 
CaseMouseMouse PadAudio
Vertu Santa Fe "Blue" Logitech Internet Pro CM Storm Pad Sound Blaster Audigy 2 ZS 
  hide details  
Reply
Sunkissed Beauty
(26 items)
 
Quirky
(12 items)
 
CPUMotherboardGraphicsRAM
Intel Core i7 3770K [ 4.5Ghz | 1.370V ] AsRock Z77 OC Formula ASUS GTX 760 DC2OC-2GD5 [ 1202/3506 ] Crucial Ballistix Elite 16GB 1866Mhz CL9 1.5V [... 
Hard DriveHard DriveHard DriveHard Drive
Crucial MX100 256GB Western Digital Caviar Blue 500GB [ WD5000AAKX ] Western Digital Caviar Blue 1TB [ WD10EZEX ] Western Digital Caviar Green 1TB [ WD10EARS ] 
Hard DriveCoolingCoolingCooling
Western Digital Caviar Green 1TB [ WD10EARS ] Corsair H100i Push&Pull Corsair SP120L PWM [ 2X] [ H100i ] Corsair SP120 PWM High Peformance [ 2X ][ H100 i] 
CoolingCoolingOSMonitor
NZXT FN 140RB [4X][Case] Cooler Master Sickleflow 120 Red [ 2X ][ Case ] Windows 10 Pro x64 Samsung B2230 
KeyboardPowerCaseMouse
Corsair Vengeance K95 RGB [ MX Brown ] Seasonic X760 NZXT Swtich 810 Black Logitech G402 
Mouse PadAudioAudioAudio
Razer Goliathus Alpha Control / Steelseries Qck... Sennheiser HD 429 Creative Inspire T7900 ASUS Xonar DGX 
OtherOther
NZXT Sentry LX NZXT Sleeved LED Kit | Orange 2M 
CPUMotherboardGraphicsOptical Drive
Intel Pentium Dual-Core E2200 MSI 945GCM5-F V2 (FSB 1333) Inno3D Nvidia GeForce GTS 450 1GB (Cooler Ripoff) Benq DVD-R,CD-R,DVD-ROM,CD-ROM 
CoolingMonitorKeyboardPower
Intel Stock Fan MAG InnoVision 770FS Logitech Internet Pro AcBel R8 PowerII 650W 80+ 
CaseMouseMouse PadAudio
Vertu Santa Fe "Blue" Logitech Internet Pro CM Storm Pad Sound Blaster Audigy 2 ZS 
  hide details  
Reply
post #20 of 26
Quote:
Originally Posted by Speedster159 View Post

So what you're saying there is really no safe way to store it?

Yes. tongue.gif

It's still the best way to have good, strong passwords that are unique for all websites and that gets you a lot of safety. You can't possibly remember all those passwords so you are seduced into only having a handful at most, which is unsafe and which is a major headache whenever something like this Heartbleed stuff happens. Writing them down on paper is perhaps even worse than a program if you want to share things with the computer at work, at home, and the phone on the road.

Another upside of the programs is also that I don't think keyloggers can steal any of your passwords because you never really type them.
Edited by deepor - 4/19/14 at 9:53am
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Networking & Security
Overclock.net › Forums › Software, Programming and Coding › Networking & Security › Are you changing passwords in response to heartbleed?