Best password manager

[woohoo]

KeePass - like it a lot.

[SimonMac]

1Password are having a sale at the moment

https://agilebits.com/store

[administrator]

From what I have gathered so far, if you change passwords on a web site or server which hasn't been patched/locked down already your new password might get snaffled.

New CA certificates have been mentioned, then generating new private/public key pairs, then changing your passwords.

Some reading - have a look at the comments too:

Krebs on Security
Matthew Green - cryptographyengineering.com

Cheers Sysman - that is what I had read as well. Need to patch OpenSSL and then regenerate keys - total PITA. The 1,000 passwords I have stored are just what is in roboform

[stek]

I use yellow Post-it note under keyboard....

[SimonMac]

Cheers Sysman - that is what I had read as well. Need to patch OpenSSL and then regenerate keys - total PITA. The 1,000 passwords I have stored are just what is in roboform

I suppose that answers the question "Does admin have any sockies"

[eek]

I suppose that answers the question "Does admin have any sockies"

we are all his sockies.....

Haven't you noticed yet?

[administrator]

I suppose that answers the question "Does admin have any sockies"

At least five are for other sites

[SimonMac]

At least five are for other sites

There are other sites?

[Sysman]

Cheers Sysman - that is what I had read as well. Need to patch OpenSSL and then regenerate keys - total PITA. The 1,000 passwords I have stored are just what is in roboform

it gets worse...

StackOverflow: What clients are proven to be vulnerable to Heartbleed?

As a matter of fact, yes, clients are vulnerable. So far the attention has been focused on servers as they are much more open to exploitation. (Almost) everyone can connect to a public HTTP/SMTP/... server.

...

The following clients have been tested against 1.0.1f and leaked memory before the handshake:

• MariaDB 5.5.36
• wget 1.15 (leaks memory of earlier connections and own state)
• curl 7.36.0
• git 1.9.1 (tested clone / push, leaks not much)
• nginx 1.4.7 (in proxy mode, leaks memory of previous requests)

XKDC's take

[northernladuk]

it gets worse...

StackOverflow: What clients are proven to be vulnerable to Heartbleed?




XKDC's take

So this only affects talking servers? No problems then....