Admin

What Your Customers Should Know About HeartBleed

By
Services for Real Estate Pros with Suplari, Inc.

Heartbleed BugThe HeartBleed bug is one of the BIGGEST issues on the Internet.  Everyone that uses the Internet is affected.  Though Heartbleed is a HUGE HUGE problem, it is also a great opportunity to offfer service to your prospects and customers.  

My suggestion: post a simple blog on Heartbleed and send an email to your database directly them to your blog post.

What is the Heartbleed bug?

According to heartbleed.com, the Heartbleed Bug is "a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs)."

In English, this means that information or passwords you thought were encrypted are actually not.

It looks like every company with a web site is in the process of updating their security to patch this bug.

What Should You Do?

Mashable.com has put together a FANTASTIC list of web sites where you should consider changing your passwords.  

One of those web site is TurboxTax and Intuit.  Great - right before tax day!

More Heartbleed Resources:

Mashable list of web sites affected by Heartbleed

ZDNet List of Security Patches

Mother Jones article on Heartbleed

Posted by

Nikesh Parekh

Add Me on Google+, Follow Me on Twitter, Connect with Me on LinkedIn:

Google+ LinkedIn Button   Twitter Logo

Comments(49)

Show All Comments Sort:
Randy Shamburger
Movement Mortgage - Greenville, SC
FHA, VA, USDA and Conventional Mortgage Expert

Awesome information here, thanks for sharing.

Have a Big day,

Randy

Apr 10, 2014 11:58 PM
Richie & You
people first-then business - Riverside, CA
Author & Consultant

At some point in my future, I look forward to less technology. Until then, Thank you

Apr 10, 2014 11:58 PM
Brad Rachielles
CENTURY 21 Peak, Ca BRE# 01489453 - Upland, CA
REALTOR, CDPE, Upland, CA

Has it been determined that ActiveRain and Trulia have plugged any possible "Heartbleed bug" holes? I understand that it is useless to change passwords until the bug is eliminated.

Apr 11, 2014 01:11 AM
AJ Heidmann ~ CRS
McEnearney Associates, Inc. - Alexandria, VA
YOUR Alexandria & Arlington, VA Real Estate Expert

It seems to just be part of our electronic living... Thanks especially for the Mashable.com links to see affected sites.

Apr 11, 2014 01:59 AM
Maria Morton
Platinum Realty - Kansas City, MO
Kansas City Real Estate 816-560-3758

Heartbleed is a scary development. Although more than half of the websites affected have corrected the problem, it's still scary not knowing what information went where before the fix. 

Apr 11, 2014 02:10 AM
Emcee M. Arah
Remax Excellence - Silver Spring, MD - Silver Spring, MD
Realtor w/Architectural Dimension, AHWD CRS B-Arch

Scary to know but good to know. Thank you for sharing this and making us all aware.

Emcee

Apr 11, 2014 02:22 AM
Connie Harvey
Pilkerton Realtors - Brentwood, TN
Realtor - Nashville TN Real Estate

Geez, Nicky, It's always something! I check the mashable site and see what I can learn and then teach.

Apr 11, 2014 04:02 AM
Nikesh Parekh
Suplari, Inc. - Seattle, WA
Technology Entrepreneur, Executive, & Investor

Time to change those passwords!

Always look for ways to add service for your customers!  So much better than "Time Change: Spring Forward!"

Apr 11, 2014 04:04 AM
Carla Muss-Jacobs, RETIRED
RETIRED / State License is Inactive - Portland, OR

The Heartbled Hit List is a good source, thanks for posting.

Apr 11, 2014 04:22 AM
Sharon Parisi
United Real Estate Dallas - Dallas, TX
Dallas Homes

Nicky, this is the second post I've read on this topic and will spend time tonight changing passwords.  Thank you for staying on top of things!

Apr 11, 2014 04:59 AM
Tarris Rogers
Cascade Sotheby's International Realty - Bend, OR
Bend Oregon Real Estate

Nickesh thanks so much for the heads up.  Appreciate the simple, straight-forward information on HeartBleed!

Apr 11, 2014 05:52 AM
Les & Sarah Oswald
Realty One Group - Eastvale, CA
Broker, Realtor and Investor

Hi Nickesh,

Will keep this in mind... we all have a lot of passwords that need to be revisted.

Apr 11, 2014 07:35 AM
Anna Hatridge
R Gilliam Real Estate LLC - Farmington, MO
Missouri Realtor with R Gilliam Real Estate LLC

Thank you for the timely post.

Apr 11, 2014 12:43 PM
Greg Nino
RE/MAX Compass - Houston, TX
Houston, Texas

Sigh.

Apr 11, 2014 01:32 PM
Myrl Jeffcoat
Sacramento, CA
Greater Sacramento Realtor - Retired

I certainly have changed a whole lot of my passwords this week.  Darn Heartbleed!

Apr 11, 2014 01:39 PM
Jerry Lucas
ABC Legal Docs LLC - Colorado Springs, CO
Notary Training, Consulting. [retired]

#13 Kevin, MalwareBytes, anti-malware and anti-virus software provide no protection for the Heartbleed security bug.  There is no infection on your computer, so there is nothing to detect.  The problem is on many websites that use an insecure version of OpenSSL, allowing Heartbleed to spy on data, including passwords.

Apr 12, 2014 12:00 AM
Jerry Lucas
ABC Legal Docs LLC - Colorado Springs, CO
Notary Training, Consulting. [retired]

#9 Joan, "How is one to remember all the passwords.. and especially when we have to change them periodically.  Any suggestions on how to manage/remember the passwords?"

I use KeePass password manager/vault to generate and store passwords.  Use a long, strong, different password for each website.  See http://keepass.info/

Apr 12, 2014 12:13 AM
Jerry Newman
Brown Realty, 210-789-4216, - San Antonio, TX
Texas REALTOR, San Antonio Military Relocation

WOW! Just before Tax Time! Will heed your advice, and pass this on to others.

Apr 13, 2014 07:41 AM
Denise Lones
The Lones Group, Inc. - Bellingham, WA
CSP, MIRM, CDEI - Real Estate Coaching & Branding

Niki, thought I'd share this with you and other readers of this post in case anyone else finds it useful. Real estate agents work with a lot of confidential information online (MLS, IDX, Docusign, email and more). They should pay attention to this issue. Ten days later and we're still seeing Heartbleed in many places. Our IT Director created a page that explains Heartbleed in simple-to-understand terms and provides links to tools people can use to protect themselves from Heartbleed.

Apr 17, 2014 05:06 AM
Nikesh Parekh
Suplari, Inc. - Seattle, WA
Technology Entrepreneur, Executive, & Investor

Great blog post Denise!

Apr 17, 2014 11:07 AM