Everybody’s talking about it – it’s the dreaded Heartbleed security bug! News of the dastardly defect has been making the rounds since its discovery was announced on April 1st, and quite understandably, we’ve been receiving a lot of questions from customers about whether their Home Security Store accounts are vulnerable. So we’d like to take a moment and assure you that your information is 100% secure on our site. Home Security Store was not affected by the bug, and your secrets are safe with us.
A Bit of Background
For those unaware, Heartbleed refers to a recently discovered security bug in the open-source OpenSSL cryptography library. In other words, the very library widely responsible for encrypting your personal information may actually be used by unscrupulous people to steal your personal information. The bug allows security certificates to be stolen, and recent reports indicate that skilled hackers may even use the bug to create fake websites that look exactly like the real thing, thereby enabling cyber-thieves to trick consumers into submitting personal information. The vulnerability was discovered within the Heartbeat Extension used by the Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) protocols, hence the name “Heartbleed.”
Which Websites are Affected by Heartbleed?
A repaired version of OpenSSL was released on April 7th, but many businesses have yet to implement the update as of this writing. The bug is said to impact up to two-thirds of the Internet, including major sites like Facebook, Google, Yahoo, Tumblr and Amazon Web Services (though not Amazon’s retail site). If you’re wondering if your favorite websites are affected, you can use this helpful Heartbleed checker to determine whether or not your information is vulnerable.
What to Do Now
It’s time to start changing your passwords. In fact, many tech industry experts are recommending that you change all of your passwords, even for sites that don’t use OpenSSL. For instance, if you use the same password for Facebook (vulnerable) and Amazon (not vulnerable), a hacker may use your Facebook password to access your Amazon profile. So just to be on the safe side, take some time to update all of your passwords if you haven’t done so already.
Your Information is Safe with Home Security Store
As previously mentioned, Home Security Store is immune to the effects of the Heartbleed bug, because our site does not use OpenSSL. Nevertheless, if your Home Security Store login password has been used on other websites, we recommend that you take a moment to change your password. Your security is of the utmost importance to us, and we go to great lengths to ensure that your personal information is always safe. Thank you for choosing Home Security Store.