coe-staff: Web Services on and off campus: Heartbleed

[Jeff Woodbury]

All,

This is a follow up to the announcement COEIT sent earlier this week on potential interruptions to campus services.

UO Information Services reports that from today through Sunday (4/10 - 4/13) you may experience short service outages due to SSL updates that must be installed. Most of this work will not cause outages. However, short interruptions are possible. Information Services is working to mitigate an Internet-wide security problem, called Heartbleed, that was announced late on Monday, April 7.

Off-campus websites and services are equally affected, since these services are not primarily work related, we are simply offering the following as a recommendation:

You may wish to review some of the Web sites listing the status of services in relation to Heatbleed. Some major providers (e.g., Google and Yahoo!) have had to patch their systems as a result of this vulnerability. Once a Web service has been patched, it is prudent to change an account's password. 

Here are two list that are tracking web sites and providers:

http://www.cnet.com/how-to/which-sites-have-patched-the-heartbleed-bug/

http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/

COEIT will send out updates if important new information relating to Heartbleed and campus services come to light.

Jeff Woodbury
Director COEIT
http://coehelp.uoregon.edu