Heartbleed security issue
By Ed Mitchell 10th April 2014
Earlier this week, a flaw in software that is used to secure Web communications across approximately 66% of the internet was disclosed. That’s a lot of the internet.
The ‘Heartbleed’ bug introduced a security vulnerability (http://heartbleed.com) in the widely used OpenSSL cryptographic library. We use this security.
We resolved this vulnerability on all of our servers as soon as possible and are now using new SSL certificates and keys. You can read the job tracking ticket if you like that sort of thing.
We do not think that this is an issue for website users who are not administrative users but are continuing our investigations. We may invite all website users to reset their passwords, but want to do a few things first.
Please contact Transition Network web support if you have any questions.
We recommend that you reset your passwords for the big online services including Google, Facebook, Yahoo, Doodle, Dropbox and more. It looks like the banks are safe. There are hundreds of news items about this at various publications dates, but Ed found this Telegraph article handy.