TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Ask HN: Bank says it fixed openSSL/HB, can those claims be tested?

1 pointsby biturdabout 11 years ago
I can find the exile date, but not the purchase or activation date. I believe they updates SSL as heartbeats are now off, but the SSK cert nobly has 114 days left on it.<p>If they did a re-issue and revoke, that would be minimum a year would it not?<p>I can get the serial number of the cert, but how would I get the old certs serial number to compare it to?<p>I worry a lot pf people patched openSSL and called it a day, but our data was already compromised, so this open SSL patch does no good other than for new users. I can change my password, but if they have all the other data they need, I am still in trouble until that revocation of the old cert happens, correct?<p>Thank you.

1 comment

biturdabout 11 years ago
I just found a tester and it states this: <a href="http://dl.dropbox.com/u/340087/drops/04.27.14/Screen%20Shot%202014-04-27%20at%208.43.05%20PM-29-204426.jpg" rel="nofollow">http:&#x2F;&#x2F;dl.dropbox.com&#x2F;u&#x2F;340087&#x2F;drops&#x2F;04.27.14&#x2F;Screen%20Shot%...</a><p>&#x27;Regenerated 2 years ago&#x27;, does that mean they in fact did not revoke, regenerate, and re-issue?