3

I see that over the past few days the hype for "Heartbleed Security Vulnerability" has increased. Several sites administrators have take actions to prevent their servers from being compromised.

Stack Exchange has also taken few steps to protect its users' data. Some of the methods have been mentioned here

Is Stack Exchange safe from Heartbleed?

Isn't it a good idea to logout all users from the network and let them signin again so that all the keys have been updated?

SoundCloud is doing this and I guess StackOverFlow and other Stack Exchange sites should take this into consideration. It can help.

Improve this question
23
  • This might be relevant?
    – Andrew Barber
    Commented Apr 9, 2014 at 19:48
  • "Several sites administrators have take actions to prevent their servers from being compromised." I really hope tens of thousands have.
    – djechlin
    Commented Apr 9, 2014 at 19:48
  • Is it a good idea to log users out and let them login again? Is it a good move?
    – Talha Masood
    Commented Apr 9, 2014 at 19:49
  • @djechlin Ehhh... as long as a handful of them have. How many sites can really be out there, anyway? ;-)
    – Andrew Barber
    Commented Apr 9, 2014 at 19:49
  • 1
    @AndrewBarber You're assuming one admin per site. Apparently those few admins simply administrate all however many billion sites out there. It can't be that much work, after all.
    – Servy
    Commented Apr 9, 2014 at 19:52
  • This action might give users a sense of security that steps are being taken to protect their data.
    – Talha Masood
    Commented Apr 9, 2014 at 19:52
  • 1
    @TalhaMasood A sense, perhaps. But I think the reality is more important.
    – Andrew Barber
    Commented Apr 9, 2014 at 19:52
  • 2
    @Servy if you want to think about it further, also don't assume one site per terminator - many sites are served behind shared terminators, even here.
    – Nick Craver
    Commented Apr 9, 2014 at 19:53
  • 13
    I just noticed my account has been compromised as early as 2009, and the hackers have been spouting nothing but nonsense in my name. I am shocked and demand urgent action
    – Pekka
    Commented Apr 9, 2014 at 19:55
  • 5
    @Pëkka Right away. I'll suspend your account in the interim!
    – Andrew Barber
    Commented Apr 9, 2014 at 19:56
  • 5
    I have the name of a good shrink, @Pëkka
    – Oded
    Commented Apr 9, 2014 at 19:56
  • 2
    I might be naive as to what the impact is, but what's wrong with leaving up to the individual users? If their account gets compromised because they failed to take the necessary steps, is that really SE's problem?
    – psubsee2003
    Commented Apr 9, 2014 at 19:57
  • 4
    @TalhaMasood - You are aware that none of the Q&A sites hold passwords, right?
    – Oded
    Commented Apr 9, 2014 at 20:00
  • 1
    @TalhaMasood Meh, easier to just silently fix the problem, if possible/needed, rather than getting people worked up over something that has already been resolved. It's probably more work to educate them to the point of being able to solve the problem than it is to just solve it for them.
    – Servy
    Commented Apr 9, 2014 at 20:01
  • 1
    @Oded Wait, you mean that gmail password renewal request email I got from [email protected] was fake??
    – Jason C
    Commented Apr 9, 2014 at 20:31

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .