Conversation

Notices

1. Windigo ☴ (windigo)'s status on Saturday, 12-Apr-2014 16:27:27 EDT Windigo ☴
   I'm thinking of regenerating all of my SSH keys due to all the heartbleed hype. Is this paranoia, or reasonable precaution?
   • Blaise Alleyne (balleyne)'s status on Sunday, 13-Apr-2014 14:42:22 EDT Blaise Alleyne

     in reply to
     @windigo I haven't seen anything to suggest the OpenSSH has been affected by #Heartbleed. Have you? It doesn't interact with OpenSSL...
   • lnxw37 (lnxwalt on quitter) (lnxw37)'s status on Sunday, 13-Apr-2014 14:56:54 EDT lnxw37 (lnxwalt on quitter)

     in reply to

     • Blaise Alleyne
     @balleyne @windigo Wouldn't it depend on whether #openssh (or ssh in general) uses #openssl / ssl heartbeat extension?
   • Blaise Alleyne (balleyne)'s status on Sunday, 13-Apr-2014 15:03:37 EDT Blaise Alleyne

     in reply to

     • lnxw37 (lnxwalt on quitter)
     @lnxw37 @windigo: right. Looks like it doesn't, according to: http://ur1.ca/h2lat
   • boneidol (boneidol)'s status on Sunday, 13-Apr-2014 15:13:46 EDT boneidol

     in reply to

     • lnxw37 (lnxwalt on quitter)
     http://undeadly.org/cgi?action=article&sid=20140408063423
   • boneidol (boneidol)'s status on Sunday, 13-Apr-2014 15:36:11 EDT boneidol

     in reply to

     • lnxw37 (lnxwalt on quitter)
     And this more detail is pertinent http://undeadly.org/cgi?action=article&sid=20140408063423&pid=7
   • Windigo ☴ (windigo)'s status on Sunday, 13-Apr-2014 15:56:59 EDT Windigo ☴

     in reply to

     • Blaise Alleyne
     • lnxw37 (lnxwalt on quitter)
     @lnxw37 @balleyne Well, that's reassuring! I'm still a little worried since the bug exposed memory, but less worried now. :)
   • Blaise Alleyne (balleyne)'s status on Sunday, 13-Apr-2014 17:13:33 EDT Blaise Alleyne

     in reply to

     • lnxw37 (lnxwalt on quitter)
     @windigo @lnxw37 see this conversation on pump.io about the bounds of memory leakage, in particular joeyh's answer: http://ur1.ca/h2m8y
   • Windigo ☴ (windigo)'s status on Sunday, 13-Apr-2014 18:39:59 EDT Windigo ☴

     in reply to

     • Blaise Alleyne
     • lnxw37 (lnxwalt on quitter)
     @lnxw37 @balleyne That is VERY reassuring! Thanks for relaying the thread - and glad to see some old faces from Identi.ca. :)