Heartbleed Bug: Information, Advice and Resources

The Heartbleed Internet security flaw has made a mess that might not be cleaned up for awhile

Join Our Community of Science Lovers!

The Heartbleed Internet security flaw discovered this week continues to affect thousands of websites, and even some Android phones, home wireless routers and embedded devices.

It's likely that this mess won't be cleaned up for quite a while. In the meantime, here are the basics and some useful links.

MORE: Best PC Antivirus Software 2014

On supporting science journalism

If you're enjoying this article, consider supporting our award-winning journalism by subscribing. By purchasing a subscription you are helping to ensure the future of impactful stories about the discoveries and ideas shaping our world today.

Heartbleed basic facts

What's affected:

Some (but not all) secure Web, email, instant-messaging and mobile-app communications

Some (but not all) home wireless routers, printers and firewalls

Some (but not all) Internet networking equipment

Some (but not all) Internet-connected devices running embedded software

Smartphones and tablets running Android 4.1.1 Jelly Bean (scroll down for how to check your device status)

Certain Linux desktop distributions, including Ubuntu Linux

What's not affected:

Web, email and mobile-app communications that were never meant to be secure

Windows PCs, Macs, most Linux desktop and laptop machines

iOS devices and most Android devices

What you can do:

Change account passwords for affected websites and services

Install firmware updates for wireless routers, printers and firewalls when they become available

Install updates for devices running Android 4.1.1 Jelly Bean when they become available

Install updates for Linux desktop distributions when they become available

Heartbleed useful resources

Heartbleed: Which Passwords You Need to Change

Yahoo Mail and Heartbleed: How to Secure Your Account

Heartbleed: Who Was Affected, What to Do Now

Beware Heartbleed Password-Reset Phishing Scams

'Heartbleed' Bug Kills Security on Millions of Websites

Other resources

Lookout Mobile Security app to detect vulnerable Android devices

Top 10,000 websites broken down by Heartbleed vulnerability status (compiled before many patched their servers)

Web page to manually check a website's vulnerability status

Webpage that checks a site's vulnerability status and assesses whether security credentials have been renewed

Firefox add-on to detect vulnerable websites

Chrome extension to detect vulnerable sites

Detailed technical explanation of the Heartbleed flaw

Good, non-technical explanation of how a Heartbleed exploit works

Follow Paul Wagenseil at @snd_wagenseil. Follow Tom's Guide at @tomsguide, on Facebook and on Google+.

Subscribe to Support Independent Journalism

Great science journalism requires human expertise, time, effort and creativity. And it costs money. That’s why I and the journalists here at Scientific American hope you’ll join our community.

When you subscribe, you are supporting staff and freelance journalists who are passionate about telling science stories that are true, important and compelling. Our editors and reporters are often experts in their fields, which means they understand the nuances of big discoveries and can untangle the breakthroughs from the hype. With a subscription, you are also supporting rigorous fact-checking to ensure the words we publish are precise and accurate. And you’re supporting original illustrations, graphics and photos that bring you closer to an advanced laboratory, an ice sheet in Antarctica or a space mission in orbit. You’re helping us craft other types of high-quality journalism as well: Our newsletters are carefully written, edited and curated by staffers you have or will come to know and love. Our Science Quickly podcast is based on original reporting, collaboration with editors and scientists and exacting production.

Subscriptions keep this engine running so we can continue to deliver thoughtful, rigorous and independent science journalism to you. In an era of viral misinformation, this work is crucial. If you value what we do, I hope you’ll consider joining us as a subscriber

Thank you,

Jeanna Bryner, Editor in Chief, Scientific American