News for hackers. Stuff that matters.

A comment on Mint won't give a clear answer about Heartbleed. Parent comment

Re:Mint won't give a clear answer about Heartbleed by gelatocar on Tuesday April 15, 2014 @09:30PM (#7595464)
Except in this case, seeing as it seems that Mint hasn't got new ssl certs or private keys, the only way to 'act accordingly' is to never use the service again.
[ Parent | on HN ]
Re:Mint won't give a clear answer about Heartbleed by LocalPCGuy on Tuesday April 15, 2014 @10:59PM (#7595829)
Or they were never vulnerable, which is likely given what has been dug up about their tech stack.
[ Parent | on HN ]
Re:Mint won't give a clear answer about Heartbleed by catshirt on Tuesday April 15, 2014 @09:35PM (#7595486)
ah, right. i didn't consider that their private key could have been leaked if they were once vulnerable (i was only considering passwords and the like). good point, thanks!
[ Parent | on HN ]