All you have to do is Google

Here is a link that might be useful: heartbleed

It does not so much as attack your passwords as it exposes an opening in a system the computer industry considered secure. Basically just about anything you ever did on a "Secure" web site is now potentially insecure. There will be a LOT of discussion about how much of a risk this actually posses, after all it has been an issue for at least two years. However, the upshot is is that you need to change your passwords for anything that you want secure.. Banking, Credit Cards, Paypal, ebay etc.. of course you were supposed to be changing them regularly anyway...

Here is a link that might be useful: The

The tool linked below may be helpful. Enter a website in the appropriate space and the search will confirm or deny [in most cases] whether the site has a problem with Heartbleed. I've used this tool to test a few of my https sites and have been relieved to find that they were protected.

However, I agree that there's no protection better than strong passwords and changing them on a regular basis. In this current threat, no one is sure how long Heartbleed has been around so that knowledge along should encourage all of us to be vigilant.

Anne

Here is a link that might be useful: Test Tool

I am reading and hearing that it's best to wait a day or two to change passwords til the various sites have fixed the flaw. Nail-biting time.

Ginny, they want you to change them now and then again in two days.. don't give any potential "evil-doer" two days grace...

Anne,

I know you are reliable and not malicious, but how did you come up with your linked site? The walk softly portion of my brain just wonders if the site could be mining "secured" sites as pointers to them for devious reasons.

DA

DA...I completely understand your concern and had intended to come back here to post the actual link this afternoon. However...you beat me to the it with your request. :-)

The actual link is:

http://filippo.io/Heartbleed/

and I acquired it from a post at: https://isc.sans.edu which is the home of Internet Storm Center...a tried and true safe internet site that I've followed for over 15 years.

I hope this answers your question and alleviates any fears you may have. I've run the tool myself or I would never have posted it here for usage.

Anne

DH found another site to check sites from the news article.

LastPast.com

I tried both and the one Anne sent says some sites are ok and lastpast will say it's not safe. So goodness knows who you trust.

Here is a link that might be useful: LastPast tool

This site...

http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/

gives a pretty good list of the websites, etc that have been hit and what precautions to take if you're involved with any of them. Just a quick perusal indicates that Google and Yahoo should be considered red light issues. But...y'all make up your own minds. I'm posting the site only as another tool for protection. This bug is not new. It's been around for a couple of years...but just now discovered. My personal thoughts are that if you use strong passwords and change them on a regular basis...you're ahead of the issue in most cases. But there are no guarantees to anything on the net.

Anne

I understand that these lists of sites could be changing almost constantly for a while, so best not to rely on any one list.