Do They Use OpenSSL on This Site?

Discus and support Do They Use OpenSSL on This Site? in XBoX on Consoles to solve the problem; OpenSSL is the flawed encryption code that allows a website to suffer from the "Heartbleed" security vunerability. Does this site run OpenSSL for it's... Discussion in 'XBoX on Consoles' started by Azrael008uk, Apr 11, 2014.

  1. Azrael008uk
    Azrael008uk Guest

    Do They Use OpenSSL on This Site?


    OpenSSL is the flawed encryption code that allows a website to suffer from the "Heartbleed" security vunerability.

    Does this site run OpenSSL for it's encryption?

    If it does then all our passwords are at risk.

    Can anyone confirm if this is the case or not?

    If it is then we'll all need to change our passwords AS SOON AS they update their OpenSSL to a secure version.

    :)
     
    Azrael008uk, Apr 11, 2014
    #1
  2. Why do they do this?

    Your team probably dashboarded to get out of a quick scoping lobby, meaning the whole other team was "sniping"/QSing. I dunno about cheevos, I dont chase em.
     
    UneasyJmitchell, Apr 11, 2014
    #2
  3. geekfather
    geekfather Guest
    Why do they do this?

    First game yesterday put into Horizon. First thing I noticed there were only 2 on my team. Wondering what I got into I started moving around. The other team had 6 players - 5 of them (fr4om what I could tell) were just jumping high and spinning with their
    sniper rifles. I am assuming this is to get an achievement in the event they did kill someone? Me and my other team mate came back (I am assuming he had just joined also) to win 75 -74.

    So is tis an achievement thing they are trying?
     
    geekfather, Apr 11, 2014
    #3
  4. Do They Use OpenSSL on This Site?

    MS are dealing with any issues
     
    MetalGearFloppy, Apr 11, 2014
    #4
  5. iBakez
    iBakez Guest
    'Heartbleed' has been around for over 3 years. This is old news whether they have just reported it or not!
     
    iBakez, Apr 11, 2014
    #5
  6. Azrael008uk
    Azrael008uk Guest
    Right...

    But do they use OpenSSL on this site?
     
    Azrael008uk, Apr 11, 2014
    #6
  7. Microsoft IIS has it's own implementation of SSL/TLS which was not impacted. Unless they use a third-party load balancer (which is unlikely since Azure can do that), then I'm confident that xbox.com and other Microsoft sites are not affected
     
    Cosmicthoughts, Apr 12, 2014
    #7
  8. Azrael008uk
    Azrael008uk Guest

    Do They Use OpenSSL on This Site?

    That's encouraging I suppose but it would be good for the Moderating Team or Community Team to just be open about it.

    Though I suppose being honest about it does run the risk of declaring your site at risk if it is.
     
    Azrael008uk, Apr 12, 2014
    #8
  9. Shigurui
    Shigurui Guest
    You knew the answer before you made the thread Az. It's open ssl, therefore free, the world and his dog know it's free and MS use proprietary code. Pointless thread made just for the sake of making a new thread.

    I know it's dull around here but ffs.
     
    Shigurui, Apr 12, 2014
    #9
  10. Knew I saw it on one of the MS Blogs:

    SOURCE

    On April 8, 2014, security researchers announced a flaw in the OpenSSL encryption software library used by many websites to protect customers’ data. The vulnerability, known as “Heartbleed,” could potentially allow a cyberattacker to access a website’s customer
    data along with traffic encryption keys.

    After a thorough investigation, Microsoft determined that Microsoft Account, Microsoft Azure, Office 365, Yammer and
    Skype, along with most Microsoft Services, are not impacted by the OpenSSL “Heartbleed” vulnerability. Windows’ implementation of SSL/TLS is also not impacted. A few Services continue to be reviewed and updated with further protections.

    Microsoft always encourages its customers to be vigilant with the security of their online accounts, change their account passwords periodically and to use complex passwords. More information on how to create strong passwords is available here: Microsoft
    Security & Safety Center: Create strong passwords.

    Emphasis in bold is my own - your xbox live account is a Microsoft Account. At any rate, if you use the same password on here as you do in other sites which have been affected, then I'd strongly urge you to change it in the event the other site was compromised.
     
    Cosmicthoughts, Apr 12, 2014
    #10
  11. Azrael008uk
    Azrael008uk Guest
    [quote user="Shiguri"]

    You knew the answer before you made the thread Az. It's open ssl, therefore free, the world and his dog know it's free and MS use proprietary code. Pointless thread made just for the sake of making a new thread.

    I know it's dull around here but ffs.

    [/quote]

    Actually all I know about OpenSSL is what's been making the papers in the past couple of days about the "Heartbleed" exploit.

    If that upsets you then I think video games have damaged your mind.
     
    Azrael008uk, Apr 12, 2014
    #11
  12. Shigurui
    Shigurui Guest
    So you post on OXF asking about open ssl security exploits? We both know that you knew the answer before you posted here. Your feigned ignorance is cute but deep down you know this isn't the place to ask.

    That little damaged mind dig is just the petulent child in you kicking out at me while you're the one asking for open ssl security advice on an xbox forum. Makes sense :/
     
    Shigurui, Apr 12, 2014
    #12
  13. Azrael008uk
    Azrael008uk Guest

    Do They Use OpenSSL on This Site?

    Wow.

    All those hours of "Ninja Gaiden".

    You must have seen some terrible things... and now you appear to be suffering from post traumatic stress syndrome on the XBox Forums.

    I still don't know that much about OpenSSL.

    All that's been in the news is that all our computers may be at risk if we use sites that use it.

    And if your password is compromised here where people log in with their XBox LIVE ID's then it's potentially compromised on XBox LIVE as well.

    That makes enough sense to me and if you don't like it there's a whole Forum full of threads that have nothing to do with this.

    Maybe you'd be happier there.
     
    Azrael008uk, Apr 12, 2014
    #13
  14. Shigurui
    Shigurui Guest
    Again, open ssl. It's open source software. Everything microsoft do/will do/have done is proprietry, they don't do open ssl but you knew that already.

    Also, what the hell does Gaiden have to do with you being an idiot?
     
    Shigurui, Apr 12, 2014
    #14
  15. Azrael008uk
    Azrael008uk Guest
    Well thanks to the link from Cosmic Thoughts everyone has an official answer from Microsoft.

    I'm not sure why you're acting the way you are now but you could have family or personal issues for all I know so I'm not going to hold it against you and I forgive you.
     
    Azrael008uk, Apr 12, 2014
    #15
Thema:

Do They Use OpenSSL on This Site?

Loading...
  1. Do They Use OpenSSL on This Site? - Similar Threads - OpenSSL Site

  2. I can't sign in xbox site, my xbox app doesn't work, minecraft can't check my license

    in XBoX Accessibility
    I can't sign in xbox site, my xbox app doesn't work, minecraft can't check my license: If i try to sign in my xbox account - just nothing happen, I click sign in and choose my microsoft account, loading starts, and back me to the start, without signing in! Also when i starts my...
  3. Why tf did you change remote play to your site now it doesn't even work even on the BETA...

    in XboX Insiders
    Why tf did you change remote play to your site now it doesn't even work even on the BETA...: Why tf did you change remote play to your site now it doesn't even work even on the BETA remote play app like the fuck you guys thinking . Sellingxbox buying ps5 fuck your stupid shit im done with...
  4. Xbox gamepass ultimate 14 days pc gamepass sharing site was not working

    in XBoX on Windows
    Xbox gamepass ultimate 14 days pc gamepass sharing site was not working: Site https://www.xbox.com/en-IN/xbox-game-pass/invite-your-friends was not working from past one week. Will this be a glitch the cover page of that site still shows older gamepass games (2022 i...
  5. "You'll need to ask to use this site" Pop-Up

    in XBoX on Windows
    "You'll need to ask to use this site" Pop-Up: I only get this pop-up on my Xbox. I don't have any restrictions established and I am not a part of any family group. 427f79b3-8026-4f42-a7a3-b8be9006e931
  6. wht to do when the game u purchased on xbox site dosent pop up on ur console

    in XBoX Games and Apps
    wht to do when the game u purchased on xbox site dosent pop up on ur console: I had purchased modern warfare 3 for my xbox 360 but after that it the game never popped up on my console please help 17d9ca95-3f26-4621-8b00-79fbc6c77eec
  7. Account is blocked and password reset site is not working?

    in XBoX Accessibility
    Account is blocked and password reset site is not working?: I've tried to login to my main account and whenever I do it tells me that my account is blocked. When I tried resetting my password, the website gives me the message "The custom error module does...
  8. when will 2k25 be on my site

    in XBoX Games and Apps
    when will 2k25 be on my site: i purchased 2K25 on 2/21 to go live today 2/28 and it is not on my site e209db56-a79e-4525-a86d-65de246526b0
  9. EN- Will there be a separate site with the E-tree game? RU-Будет ли отдельный сайт с игрой...

    in XBoX on Windows
    EN- Will there be a separate site with the E-tree game? RU-Будет ли отдельный сайт с игрой...: EN- Will there be a separate site with the E-tree game? RU-Будет ли отдельный сайт с игрой E-tree? c79e516a-3c55-4106-8658-af1f623ac4be
  10. If I buy Minecraft on the Minecraft site, do I also have to buy the $20.00 xbox version...

    in XBoX Games and Apps
    If I buy Minecraft on the Minecraft site, do I also have to buy the $20.00 xbox version...: So basically, I got minecraft for 30 bucks on the minecraft site, but a parental thing conflicts with that, so I can only play singleplayer, I have downloaded the xbox family safety app, and...