In the wake of the Bug heartbleed, many Golden Frog customers reached to see if the Golden Frog services were affected and if customers need to take action. First, be assured all Golden Frog services are currently safe Bug heartbleed. VyprVPN and the website Golden Frog have never used the vulnerable SSL libraries pulsation TLS use. Dump trucks SSL libraries have been patched April 8, 2014, and new SSL key for the service were generated and successfully deployed. However, due to the nature of the bug, we still recommend all customers change their passwords , especially if you used Dump Truck. Change your password "
are vulnerable VyprVPN Apps?
Our applications using OpenSSL 1.0.1e, which is vulnerable to Bug heartbleed for OpenVPN connections. However, even if the applications use a vulnerable version of OpenSSL, customer information is not in danger. To be compromised applications will connect to servers that send malicious heartbeat packets. Our applications will connect to VyprVPN servers that do not send malicious packets. Although VyprVPN applications were somehow deceived by connecting to a malicious server, applications do not have all the information that they are not already sending to the server. There is nothing malicious server could collect from the client he would not get anyway.
We will prepare updated versions of our applications that use non-vulnerable versions of OpenSSL, but at that time, customers are not at risk using existing versions of applications .
What is the heartbleed bug?
heartbleed the bug is a bug in the OpenSSL implementation of the extension of the TLS heartbeat. When operated, it allows an attacker to access the SSL server content and client memory. This memory may include SSL key, the content data through the connection and the user names and passwords transmitted or stored in the memory of the client and the server. Due to the complete compromise of the SSL session and secret key data needed to maintain secure communications, this is considered extremely critical bug. A complete overview can be found at http://heartbleed.com/
What actions should I take?
If you used Dump Truck We recommend you change your password. To change your password, visit this page: https://www.goldenfrog.com/controlpanel/account/password.
- Log in to your Control Panel
- Click account
- Click Edit link next to Password
- Enter your new password
- Click Change Password button
A Golden Frog we strive to keep our customers secure and appreciate all the questions we have received. We are happy to see our guests enjoy their privacy and security and will continue to provide necessary updates on heartbleed. If you have further questions please do not hesitate to contact our support team 24x7x365 email or live chat.
To stay updated with Golden Frog, please subscribe to Golden Frog blog and follow us on Facebook, Twitter and Google+. Or, if you have an idea or feature request product, please share it with us http://ideas.goldenfrog.com.
Updated 10/04/2014
0 Komentar