Slashdot Mirror

← Back to Stories (view on slashdot.org)

Over 300,000 Servers Remain Vulnerable To Heartbleed

Posted by samzenpus on from the protect-ya-neck dept.

An anonymous reader writes Even though it's been a couple months since the Heartbleed bug was discovered, many servers remain unpatched and vulnerable. "Two months ago, security experts and web users panicked when a Google engineer discovered a major bug — known as Heartbleed — that put over a million web servers at risk. The bug doesn't make the news much anymore, but that doesn't mean the problem's solved. Security researcher Robert David Graham has found that at least 309,197 servers are still vulnerable to the exploit. Immediately after the announcement, Graham found some 600,000 servers were exposed by Heartbleed. One month after the bug was announced, that number dropped down to 318,239. In the past month, however, only 9,042 of those servers have been patched to block Heartbleed. That's cause for concern, because it means that smaller sites aren't making the effort to implement a fix."

5 of 74 comments (clear)

  1. Hosting? by houstonbofh · · Score: 4, Insightful

    I wonder how many of these are dirt cheap hosting servers, and no one who should care even knows the hosting company is asleep at the switch...

  2. Let's put teenagers in jails by Jorge666 · · Score: 3, Insightful

    Why would someone patch the web server?
    We don't like smart and taking initiative teenagers, here in the USA

    1. Teenager sends email to administrators advising them about unpatched server.
    2. SWAT raids the home of the kid.
    3. DA sends the kid to private jail for life and announces running for another term.
    4. ?
    5. Profit or reality of life in the USA

  3. Re:and yet cryptocurrencies remain immune...! by plover · · Score: 4, Insightful

    You've packed a lot of wrong into such a short post. If a system is insecure a "good" architecture is irrelevant - you're still screwed. And either way, neither architecture nor cryptocurrencies have anything to do with this problem, which is unpatched OpenSSL.

    --
    John
  4. Re:and yet cryptocurrencies remain immune...! by jaeztheangel · · Score: 1, Insightful

    If a system is insecure a "good" architecture is irrelevant - you're still screwed.

    Dear John

    Please can you explain how BitCoin is vulnerable to Heartbleed?

    I think good architecture is essential to good security. That's why I posted.

    Many Thanks

    Jawad Yaqub

  5. Re:Better Career Path by jellomizer · · Score: 3, Insightful

    300,000 seems like a small number, if you stop and consider how many sub amateurs setup web servers.
    You were told that Linux is very secure and you don't have to worry about hacks and viruses. You installed your favorite distribution, and got what ever web stuff you wanted and then you left the server running ranking up Uptime and not touching the server ever again. Heck I am willing to bet for some of these systems the Hard Drive failed years ago, and they are running off of ram alone.
    Web Page still works, everything is A-OK.

    --
    If something is so important that you feel the need to post it on the internet... It probably isn't that important.