Is Irish Bank Online Passwords Affected by Heartbleed

roboshatner

Is Ulster Bank Affected ?

List below of site passwords that must be changed.

http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/

Fred Swanson

This post has been deleted.

Kenno90

This was brought up a few days ago, AIB and BOI have said they are not affected by it.

roboshatner

I would say that is a load of Bs.

So they were not affected at all in the biggest system failure in the world ?

Pacing Mule

roboshatner wrote: »

I would say that is a load of Bs.

So they were not affected at all in the biggest system failure in the world ?

You would say based on what information ?

The system failure you refer to was with a particular piece of server software called open ssl. There are other competing programs / software that provide the same function to servers. Therefore it is quite plausible that the bank have never used the software and are therefore not exposed to the flaw.

As an example if gmail was to be found to be compromised in some way people using windows mail / hotmail would not automatically be assumed to be effected by a gmail specific issue.

roboshatner

I am just saying after all the banks how been threw with us in ireland and all that hassle.

and they are saying that it was not in the least bit affected is bs.

There is always more to it.

28064212

roboshatner wrote: »

I would say that is a load of Bs.

So they were not affected at all in the biggest system failure in the world ?

How much do you actually know about Heartbleed? Approximately 17% of SSL servers were affected. For banks, that figure is likely to be much lower, for two reasons:

• Banks don't like to upgrade. OpenSSL only became vunerable in March 2012. If a bank used OpenSSL, they would have had to upgrade their version since then
• Banks don't typically like open source software (which you would have to use to be vunerable)

And of course, you could just check it yourself using a tool like this: http://toolbar.netcraft.com/site_report?url=https%3A%2F%2Faibinternetbanking.aib.ie%2Finet%2Froi%2Flogin.htm#last_reboot

If you're going to cry foul, I suggest you have something better than "that is a load of bs"