3

I see that over the past few days the hype for "Heartbleed Security Vulnerability" has increased. Several sites administrators have take actions to prevent their servers from being compromised.

Stack Exchange has also taken few steps to protect its users' data. Some of the methods have been mentioned here

Is Stack Exchange safe from Heartbleed?

Isn't it a good idea to logout all users from the network and let them signin again so that all the keys have been updated?

SoundCloud is doing this and I guess StackOverFlow and other Stack Exchange sites should take this into consideration. It can help.

23
  • This might be relevant? Apr 9, 2014 at 19:48
  • "Several sites administrators have take actions to prevent their servers from being compromised." I really hope tens of thousands have.
    – djechlin
    Apr 9, 2014 at 19:48
  • Is it a good idea to log users out and let them login again? Is it a good move? Apr 9, 2014 at 19:49
  • @djechlin Ehhh... as long as a handful of them have. How many sites can really be out there, anyway? ;-) Apr 9, 2014 at 19:49
  • 1
    @AndrewBarber You're assuming one admin per site. Apparently those few admins simply administrate all however many billion sites out there. It can't be that much work, after all.
    – Servy
    Apr 9, 2014 at 19:52
  • This action might give users a sense of security that steps are being taken to protect their data. Apr 9, 2014 at 19:52
  • 1
    @TalhaMasood A sense, perhaps. But I think the reality is more important. Apr 9, 2014 at 19:52
  • 2
    @Servy if you want to think about it further, also don't assume one site per terminator - many sites are served behind shared terminators, even here. Apr 9, 2014 at 19:53
  • 13
    I just noticed my account has been compromised as early as 2009, and the hackers have been spouting nothing but nonsense in my name. I am shocked and demand urgent action
    – Pekka
    Apr 9, 2014 at 19:55
  • 5
    @Pëkka Right away. I'll suspend your account in the interim! Apr 9, 2014 at 19:56
  • 5
    I have the name of a good shrink, @Pëkka
    – Oded
    Apr 9, 2014 at 19:56
  • 2
    I might be naive as to what the impact is, but what's wrong with leaving up to the individual users? If their account gets compromised because they failed to take the necessary steps, is that really SE's problem? Apr 9, 2014 at 19:57
  • 4
    @TalhaMasood - You are aware that none of the Q&A sites hold passwords, right?
    – Oded
    Apr 9, 2014 at 20:00
  • 1
    @TalhaMasood Meh, easier to just silently fix the problem, if possible/needed, rather than getting people worked up over something that has already been resolved. It's probably more work to educate them to the point of being able to solve the problem than it is to just solve it for them.
    – Servy
    Apr 9, 2014 at 20:01
  • 1
    @Oded Wait, you mean that gmail password renewal request email I got from [email protected] was fake??
    – Jason C
    Apr 9, 2014 at 20:31

0

You must log in to answer this question.

Browse other questions tagged .