Information Services releases critical information on the Heartbleed bug UPDATED

Twitter Facebook
There is significant national attention on an internet security flaw, and UO Information Services has worked quickly this week to assess the university’s vulnerabilities and implement solutions where needed.

On April 7, the security flaw known as Heartbleed, was discovered. The vulnerable software, OpenSSL, is part of many websites and online services and is used to secure Internet communications. The flaw allows hackers to get personal information without detection.

CHART: "THE PASSWORDS YOU NEED TO CHANGE RIGHT NOW"

By April 9, Information Services had evaluated all University of Oregon central technology services and either determined they were not affected or patched the software. This includes key services such as email, Banner, DuckWeb and Blackboard. As part of this work, Information Services will need to restart services between noon on Thursday, April 10, and midnight on Sunday, April 13. You should not see any interruptions. However, in a few circumstances, services may be unavailable for 5 or 10 minutes. Information on service status is online at http://status.uoregon.edu. 

Information Services also emailed a chart (via Mashable) this morning for various websites/services, their vulnerability to the Heartbleed bug and recommendations about whether to change user passwords. Since this bug not only affects campus accounts, but also personal accounts including social media, web shopping, email, etc., please consult the chart for vulnerabilities on your personal accounts.  

For more information on Heartbleed on campus, see http://it.uoregon.edu/heartbleed-faq. If you have questions, contact your local IT support person or the Information Services Technology Service Desk at techdesk@uoregon.edu or 541-346-HELP.

UPDATE concerning chaging UO passwords:
You will need to change your UO passwords, but please wait until asked to do so. To improve security, we need to insure that work across campus has been completed. For assistance in changing your password, see Heartbleed: How to Change Your Password.

- from Information Services

Submit Your Story Idea