3

I see that over the past few days the hype for "Heartbleed Security Vulnerability" has increased. Several sites administrators have take actions to prevent their servers from being compromised.

Stack Exchange has also taken few steps to protect its users' data. Some of the methods have been mentioned here

Is Stack Exchange safe from Heartbleed?

Isn't it a good idea to logout all users from the network and let them signin again so that all the keys have been updated?

SoundCloud is doing this and I guess StackOverFlow and other Stack Exchange sites should take this into consideration. It can help.

  • This might be relevant? – Andrew Barber Apr 9 '14 at 19:48
  • "Several sites administrators have take actions to prevent their servers from being compromised." I really hope tens of thousands have. – djechlin Apr 9 '14 at 19:48
  • Is it a good idea to log users out and let them login again? Is it a good move? – Talha Masood Apr 9 '14 at 19:49
  • @djechlin Ehhh... as long as a handful of them have. How many sites can really be out there, anyway? ;-) – Andrew Barber Apr 9 '14 at 19:49
  • 1
    @AndrewBarber You're assuming one admin per site. Apparently those few admins simply administrate all however many billion sites out there. It can't be that much work, after all. – Servy Apr 9 '14 at 19:52
  • This action might give users a sense of security that steps are being taken to protect their data. – Talha Masood Apr 9 '14 at 19:52
  • 1
    @TalhaMasood A sense, perhaps. But I think the reality is more important. – Andrew Barber Apr 9 '14 at 19:52
  • 2
    @Servy if you want to think about it further, also don't assume one site per terminator - many sites are served behind shared terminators, even here. – Nick Craver Apr 9 '14 at 19:53
  • 13
    I just noticed my account has been compromised as early as 2009, and the hackers have been spouting nothing but nonsense in my name. I am shocked and demand urgent action – Pekka Apr 9 '14 at 19:55
  • 5
    @Pëkka Right away. I'll suspend your account in the interim! – Andrew Barber Apr 9 '14 at 19:56
  • 5
    I have the name of a good shrink, @Pëkka – Oded Apr 9 '14 at 19:56
  • 2
    I might be naive as to what the impact is, but what's wrong with leaving up to the individual users? If their account gets compromised because they failed to take the necessary steps, is that really SE's problem? – psubsee2003 Apr 9 '14 at 19:57
  • 4
    @TalhaMasood - You are aware that none of the Q&A sites hold passwords, right? – Oded Apr 9 '14 at 20:00
  • 1
    @TalhaMasood Meh, easier to just silently fix the problem, if possible/needed, rather than getting people worked up over something that has already been resolved. It's probably more work to educate them to the point of being able to solve the problem than it is to just solve it for them. – Servy Apr 9 '14 at 20:01
  • 1
    @Oded Wait, you mean that gmail password renewal request email I got from administrator@stac.koverflow.com was fake?? – Jason C Apr 9 '14 at 20:31

You must log in to answer this question.

Browse other questions tagged .