Social media share - social media - Media share
socialmedia-share.com

We recommend that you change your reddit password


Greetings all,

As you may have heard, reddit quickly patched its SSL endpoints against server attack of the infamous heartbleed vulnerability. However, the heartbleed vulnerability has been around for quite some time, and up until it was publicly disclosed reddit's SSL endpoints were vulnerable.

Additionally, our application was found to have a client-side vulnerability to heartbleed which allowed memory to be leaked to external servers. We quickly addressed this after it was reported to us. Exploiting this vulnerability required the use of a specific API call on reddit, and we have analyzed our logs and found nothing to suggest that this API call was being exploited en masse. However, the vulnerability did exist.

Given these two circumstances, it is recommended that you change your reddit password as a precaution. Updating your password will log you out of all other reddit.com sessions. We also recommend that you make use of a unique, strong password on any site you use. The most common way accounts on reddit get broken into is by attackers exploiting password reuse.

It is also strongly recommended, though not required, that you set an email address on your reddit account. If you were to ever forget your password, we cannot contact you to reset it if we don't have your email address. We do not sell or otherwise make your email address available to third-parties, as indicated in our privacy policy.

Stay safe out there.

alienth

Further reading:

xkcd simple explanation of how heartbleed works

Heartbleed on wikipedia

Edit: A few people indicated that they had changed their passwords recently and wanted to know if they're now safe. We addressed the server issue hours after it was disclosed on April 7th. The client-side leak was disclosed and addressed on April 9th. Our old certs were revoked by the 9th (all dates in PDT). If you have changed your password since April 9th, you're AOK.

View Reddit by alienthSource

socialmedia-share

Add comment

Categories

Follow us

Don't be shy, get in touch. We love meeting interesting people and making new friends.

Categories

Social Widget

Collaboratively harness market-driven processes whereas resource-leveling internal or "organic" sources.

Categories

 - 
Afrikaans
 - 
af
Albanian
 - 
sq
Amharic
 - 
am
Arabic
 - 
ar
Armenian
 - 
hy
Azerbaijani
 - 
az
Basque
 - 
eu
Belarusian
 - 
be
Bengali
 - 
bn
Bosnian
 - 
bs
Bulgarian
 - 
bg
Catalan
 - 
ca
Cebuano
 - 
ceb
Chichewa
 - 
ny
Chinese (Simplified)
 - 
zh-CN
Chinese (Traditional)
 - 
zh-TW
Corsican
 - 
co
Croatian
 - 
hr
Czech
 - 
cs
Danish
 - 
da
Dutch
 - 
nl
English
 - 
en
Esperanto
 - 
eo
Estonian
 - 
et
Filipino
 - 
tl
Finnish
 - 
fi
French
 - 
fr
Frisian
 - 
fy
Galician
 - 
gl
Georgian
 - 
ka
German
 - 
de
Greek
 - 
el
Gujarati
 - 
gu
Haitian Creole
 - 
ht
Hausa
 - 
ha
Hawaiian
 - 
haw
Hebrew
 - 
iw
Hindi
 - 
hi
Hmong
 - 
hmn
Hungarian
 - 
hu
Icelandic
 - 
is
Igbo
 - 
ig
Indonesian
 - 
id
Irish
 - 
ga
Italian
 - 
it
Japanese
 - 
ja
Javanese
 - 
jw
Kannada
 - 
kn
Kazakh
 - 
kk
Khmer
 - 
km
Korean
 - 
ko
Kurdish (Kurmanji)
 - 
ku
Kyrgyz
 - 
ky
Lao
 - 
lo
Latin
 - 
la
Latvian
 - 
lv
Lithuanian
 - 
lt
Luxembourgish
 - 
lb
Macedonian
 - 
mk
Malagasy
 - 
mg
Malay
 - 
ms
Malayalam
 - 
ml
Maltese
 - 
mt
Maori
 - 
mi
Marathi
 - 
mr
Mongolian
 - 
mn
Myanmar (Burmese)
 - 
my
Nepali
 - 
ne
Norwegian
 - 
no
Pashto
 - 
ps
Persian
 - 
fa
Polish
 - 
pl
Portuguese
 - 
pt
Punjabi
 - 
pa
Romanian
 - 
ro
Russian
 - 
ru
Samoan
 - 
sm
Scots Gaelic
 - 
gd
Serbian
 - 
sr
Sesotho
 - 
st
Shona
 - 
sn
Sindhi
 - 
sd
Sinhala
 - 
si
Slovak
 - 
sk
Slovenian
 - 
sl
Somali
 - 
so
Spanish
 - 
es
Sundanese
 - 
su
Swahili
 - 
sw
Swedish
 - 
sv
Tajik
 - 
tg
Tamil
 - 
ta
Telugu
 - 
te
Thai
 - 
th
Turkish
 - 
tr
Ukrainian
 - 
uk
Urdu
 - 
ur
Uzbek
 - 
uz
Vietnamese
 - 
vi
Welsh
 - 
cy
Xhosa
 - 
xh
Yiddish
 - 
yi
Yoruba
 - 
yo
Zulu
 - 
zu
en_USEnglish