Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Ask HN: openSSL/heartbleed for internal company apps?.
You should consider all servers running a vulnerable OpenSSL installation to be compromised. You'll need to rekey all your certificates.
Do not trust the fact that "the servers are internal" because if your perimeter has been breached you will most likely know only after the fact.
Personally, I tend to treat internal services with the same process I use for external services, they just come second on the list.
There are no comments on this comment yet.
You should consider all servers running a vulnerable OpenSSL installation to be compromised. You'll need to rekey all your certificates.
Do not trust the fact that "the servers are internal" because if your perimeter has been breached you will most likely know only after the fact.
Personally, I tend to treat internal services with the same process I use for external services, they just come second on the list.