Heartbleed bug. Is now 100% safe to change my passwords?

Question

I didn't know about the heartbleed bug until i logged on my tumblr and saw the post about changing my password and the fact that the post recommended that i change my password on other sites i used, i took it seriously and began to worried. So i googled it and info about the heartbleed bug popped up.

I've been using the sites, to test the vulnerability of other sites, and some of the sites that i use doesn't really say if they've been affected or not.

i want to change my passwords on the other sites, but since theres not info saying that theyve been affected i don't know if i should change the passwords. ive read conflicting articles saying not to change it cause that's what the hackers want(new passwords), then i read to change them immediately.

Should i just change them all anyway or still wait?

also, i have load of accounts on multilple sites and a ton of email addresses.. some of that i even dont remember. should i worry about the sites that i don't remember and haven't used in a while or only the major sites that i use daily?

thanks guys :)

Answer 1

Give it a little while. Right now a lot of sites have not fixed the problem as the websites affected have to fix the problem individually. Tumblr has fixed the issue and you should now change your password, however yahoo are still in process of fixing it so it would be pointless to change your password until they have fixed the issue. Unfortunately there is not real way to find out which sites have been affected. I'd just give it like a week before changing passwords

Answer 2

Heartbleed is supposed to be fixed soon, I've just been kinda paranoid about it and turned off cookies, used private browsing, and changed all my passwords to random numbers and letters. Don't recommend making online purchases because VeriSign still uses OpenSLL (to my knowledge)

Answer 3

There is information on this here:

http://www.freepchelp.co.uk/threads/16190-Critical-flaw-in-OpenSSL-(-Heartbleed-Bug-)?highlight=heartbleed#.U0u61SCShx0



and here

http://heartbleed.com/



Hope this helps.