[nlug] a quick test to determine heartbleed vulnerability

2014-04-10 Thread andrew mcelroy
I wish I had seen this sooner, but it's a useful tool http://filippo.io/Heartbleed/ Also, if you are on ubuntu https://gist.github.com/coderanger/10084033 Make sure you restart the webserver after you apply the fix. I can confirm that this gist worked for ubuntu 12.0.4.4 LTS Andrew McElroy -- -

Re: [nlug] a quick test to determine heartbleed vulnerability

2014-04-10 Thread John R. Dennison
On Thu, Apr 10, 2014 at 11:41:48AM -0500, andrew mcelroy wrote: > I wish I had seen this sooner, but it's a useful tool > http://filippo.io/Heartbleed/ Sure. If you like the idea of submitting possibly vulnerable sites to some completely random .io domain that may well be snarfing creds and keys.

Re: [nlug] a quick test to determine heartbleed vulnerability

2014-04-10 Thread andrew mcelroy
It's open source. See that fork on GitHub. You're welcome Sent from my iPhone > On Apr 10, 2014, at 1:55 PM, "John R. Dennison" wrote: > >> On Thu, Apr 10, 2014 at 11:41:48AM -0500, andrew mcelroy wrote: >> I wish I had seen this sooner, but it's a useful tool >> http://filippo.io/Heartbleed

Re: [nlug] a quick test to determine heartbleed vulnerability

2014-04-10 Thread John R. Dennison
On Thu, Apr 10, 2014 at 04:30:52PM -0500, andrew mcelroy wrote: > It's open source. See that fork on GitHub. You're welcome Let me know when you are able to confirm that is what's running on that web site. John -- You know, sometimes, when th

Re: [nlug] a quick test to determine heartbleed vulnerability

2014-04-10 Thread andrew mcelroy
Sent from my iPhone > On Apr 10, 2014, at 4:38 PM, "John R. Dennison" wrote: > >> On Thu, Apr 10, 2014 at 04:30:52PM -0500, andrew mcelroy wrote: >> It's open source. See that fork on GitHub. You're welcome > > Let me know when you are able to confirm that is what's running on that > web si

Re: [nlug] a quick test to determine heartbleed vulnerability

2014-04-10 Thread Jack Coats
I just checked my mint system. It has 1.0.1e - is that version safe from the Heartbeat issue? I thought I saw it is, but I could be off by a version. On Thu, Apr 10, 2014 at 4:44 PM, andrew mcelroy wrote: > > > Sent from my iPhone > > > On Apr 10, 2014, at 4:38 PM, "John R. Dennison" > wrote

Re: [nlug] a quick test to determine heartbleed vulnerability

2014-04-10 Thread Jack Coats
me bad, it must be 1.0.1g to have the vulnerability fixed. ... just re-ran updates and that is the now current version. On Thu, Apr 10, 2014 at 10:01 PM, Jack Coats wrote: > I just checked my mint system. It has 1.0.1e - is that version safe from > the Heartbeat issue? I thought I saw it is,

Re: [nlug] a quick test to determine heartbleed vulnerability

2014-04-11 Thread John R. Dennison
On Thu, Apr 10, 2014 at 04:44:30PM -0500, andrew mcelroy wrote: > > That's irrelevant. Just download the code and run it locally. And, once again, you miss the entire point. John -- Failure is the condiment that gives success its flavor. --