04/12/2014
I have refrained from saying much about the Heartbleed bug due to uncertainty in exactly what was affected and how much. However, I have a few comments to make:
1) Changing your passwords immediately, as suggested by some news outlets, was NOT the way to protect yourself. If the site had not been secured and someone was exploiting this vulnerability, your new password could also become compromised.
2) Now that an OpenSSL patch has been issued for over 48 hours, all vulnerable websites should have patched their servers. You can visit this link - http://goo.gl/tunNrV - to see if a website you use has been affected. If it is, NOW is the time to change your password. If you changed it without knowing for sure that the site was secure, I would recommend changing it again.
3) The damage is not over! Cisco and Juniper have admitted that Heartbleed bug may be present in their routers, switches, and firewalls. It is likely that other companies will have this vulnerability in their equipment, as well. It is likely that many people will need to update their router firmware in order to keep their internet connection safe. It is also possible that sites using compromised equipment may still be unsafe.
4) The most important thing to stress: be vigilant. Don't open emails or links that look strange without verifying them with the sender. If you notice a strange post from someone, let them know right away so they can change their password.