Hacker News Reader

Parent Full thread

roganartu

The tip4commit website is vulnerable to Heartbleed:

https://filippo.io/Heartbleed/#tip4commit.com

Don't sign in or register or you may have more to worry about than undesired tax liabilities.

EDIT: It's fixed now.

View on HN

Did you tell them?

EDIT: I did https://github.com/tip4commit/tip4commit/issues/147

I'm sure he sent them a notification about their new account on his website on which, if they create an account, they may or may not find information of value to them.

Thank you very much! I am quite surprised because I remember fixing this issue in the same day patch became available and I run update recently. Upgrading the distro, hopefully it fixes the problem.

Upgrading the distro is likely insufficient, as your private key has potentially (likely, at this point) been compromised. At a minimum you need a new key and cert.

Reply on news.ycombinator.com