Flaw exposes personal info
Internet security experts are scrambling to patch an alarming encryption vulnerability that has exposed millions of passwords and personal information.
It is being called the Heartbleed bug and it appears to be a flaw in the encryption code that many websites use to protect passwords and other information and is not a computer virus.
As many as two thirds of websites use OpenSSL, the known encryption code with the flaw. It was discovered two years ago by Finnish security researchers and could allow hackers to decipher encrypted data without website owners or users being alerted.
The vulnerability occurs when OpenSSL is used in combination with a specific communication protocol that allows a user to remain connected to a website server.
Concerns with the flaw forced the Canadian Revenue Agency (CRA) website to shut down and it is not expected to be up until next week. The CRA said that the move was precautionary with no evidence of a security breach. Canadian banks and major online retailers have said that they have not been affected by the bug.
Online news site Mashable has put together a list of affected sites and is suggesting users change their passwords immediately. The list includes: Facebook, Gmail, Tumblr, Yahoo mail, GoDaddy, Intuit, Dropbox, Lastpass, OkCupid and Soundcloud.
No change
BC Ferries has announced the Queen of Chilliwack will remain on the Earls Cove - Saltery Bay route until the end of April.
In a press release April 9, the corporation states the Island Sky, the regular ferry on the route, will return May 1. Originally, the plan was to change mid-April.
For travellers, this means the modified schedule to accommodate the Chilliwack’s 60-minute crossing time will remain in effect until the end of the month. When the Island Sky returns, the crossing time will decrease to 50 minutes and the schedule will return to normal. More information is available online.
