News for hackers. Stuff that matters.

A comment on Heartbleed Bug: Public urged to reset all passwords.

Re:Heartbleed Bug: Public urged to reset all passwords by ibmthrowaway218 on Wednesday April 09, 2014 @10:25AM (#7559446)
Which is worse?

a) Leaving your password unchanged on a site because it is still vulnerable.

b) Changing your password on a site that is still vulnerable.

[ Parent | on HN ]
Re:Heartbleed Bug: Public urged to reset all passwords by matthewi on Wednesday April 09, 2014 @12:45PM (#7560472)
I think that depends on your password management policies. If you are using a unique password for every site, change them all now and then change the ones that were vulnerable again after they are patched. If you are like many people and reuse passwords, you should not change that password to be one you use at a patched site.
[ Parent | on HN ]