{"id":7372,"date":"2014-04-13T08:14:33","date_gmt":"2014-04-13T12:14:33","guid":{"rendered":"http:\/\/thundercloud.net\/infoave\/new\/?p=7372"},"modified":"2014-04-13T08:14:33","modified_gmt":"2014-04-13T12:14:33","slug":"nsa-used-the-heartbleed-bug-to-steal-passwords","status":"publish","type":"post","link":"https:\/\/www.thundercloud.net\/infoave\/new\/nsa-used-the-heartbleed-bug-to-steal-passwords\/","title":{"rendered":"NSA Used the Heartbleed Bug to steal passwords"},"content":{"rendered":"
\n

Report: NSA Exploited Heartbleed to Siphon Passwords for Two Years<\/a><\/h1>\n<\/header>\n
\n
\n
\n
\n

\"Image:<\/a><\/p>\n

The NSA knew about and exploited the Heartbleed vulnerability for two years before it was publicly exposed this week, and used it to steal account passwords and other data, according to a news report.<\/p>\n

Speculation had been rampant this week that the\u00a0spy agency might have known about the critical flaw in OpenSSL<\/a>\u00a0that would allow hackers to siphon passwords, email content and other data from the memory of vulnerable web servers and other systems using the important encryption protocol.<\/p>\n

That speculation appears to be confirmed by two unnamed sources who told Bloomberg that the NSA\u00a0discovered the flaw shortly after it was accidentally introduced into OpenSSl in 2012<\/a>\u00a0by a programmer.<\/p>\n

The flaw \u201cbecame a basic part of the agency\u2019s toolkit for stealing account passwords and other common tasks,\u201d the publication reports. [See NSA response …)<\/p>\n

Read the entire article on Wired<\/a><\/span><\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"

Report: NSA Exploited Heartbleed to Siphon Passwords for Two Years The NSA knew about and exploited the Heartbleed vulnerability for two years before it was publicly exposed this week, and used it to steal account passwords and other data, according to a news report. Speculation had been rampant this week that the\u00a0spy agency might have known about the\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1426,1670,1656,1654],"tags":[],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/7372"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=7372"}],"version-history":[{"count":1,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/7372\/revisions"}],"predecessor-version":[{"id":7373,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/7372\/revisions\/7373"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=7372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=7372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=7372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}