NSA used Heartbleed bug to capture information, report says


Posted: 04/11/2014 01:35:21 PM PDT


Updated: 04/11/2014 01:35:23 PM PDT


The National Security Agency knew for at least two years about the software flaw that has left countless individuals vulnerable to hackers, but the agency failed to alert the public and instead used the weakness to gather intelligence, Bloomberg News reported Friday.


The flaw involves the so-called Heartbleed bug, a flaw in the OpenSSL encryption tool that is believed to be used on about two-thirds of all websites. Because of the glitch, security experts say hackers could steal countless passwords used to access websites and other sensitive information.


By exploiting the Heartbleed bug, Bloomberg said, the NSA was able to obtain vital data used by cyber crooks. It said the clandestine agency discovered the flaw shortly after it was accidentally created in 2012 by an adjustment in the OpenSSL software, according to an unnamed source.


After that, Bloomberg said, the bug 'became a basic part of the agency's tool kit for stealing account passwords' and other information.


NSA spokeswoman Vanee Vines declined to comment on the agency's use of the bug, Bloomberg reported.


Contact Steve Johnson at sjohnson@mercurynews.com or 408-920-5043. Follow him at http://ift.tt/1fGGKSP


Please enable JavaScript to view the comments powered by Disqus.comments powered by


Comments

Popular posts from this blog

5 Reasons iPhone 6 Won't Be Popular

Eset nod32 ativirus 6 free usernames and passwords

Apple's self