Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!us.feeder.erje.net!news2.arglkargh.de!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Arno Welzel <usenet@arnowelzel.de>
Newsgroups: comp.lang.php
Subject: Re: Heartbleed bug?
Date: Fri, 11 Apr 2014 13:00:22 +0200
Lines: 22
Message-ID: <5347CB46.7080603@arnowelzel.de>
References: <38941292-a3a7-4dc0-ba31-873351d81924@googlegroups.com> <li6e5s$pe5$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Trace: individual.net YBAeHotY0E5Dlnz8qELXkQS7QyvTjSLWjY/Kf1EcbGaxmSGB0c
Cancel-Lock: sha1:N1AkWDL6WUO1omzG4bVcTZLWuIM=
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
In-Reply-To: <li6e5s$pe5$1@dont-email.me>
Xref: csiph.com comp.lang.php:13392

Am 10.04.2014 17:42, schrieb Denis McMahon:
> On Wed, 09 Apr 2014 05:24:02 -0700, Kevin Burton wrote:
> 
>> Anyone know how this bug http://heartbleed.com/ affects PHP when the
>> extension is enabled? Is there a patch for the extension?
> 
> My understanding of heartbleed is that it potentially exposes data 
> transferred over ssl encrypted links. As php generally[1] doesn't 
[...]

No - heartbleed means a server will send everybody some data when asked.

This may help to understand it:

<http://xkcd.com/1354/>


-- 
Arno Welzel
http://arnowelzel.de
http://de-rec-fahrrad.de
http://fahrradzukunft.de