<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1262033498;
mso-list-template-ids:611727432;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>Understand "Heartbleed" and Protect Yourself<o:p></o:p></span></b></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>There is recent news there is a vulnerability to websites through the Heart Bleed Bug </span><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:black;background:#FAFAFA'>(</span><span style='font-size:10.0pt'><a href="http://www.cnet.com/news/how-to-protect-yourself-from-the-heartbleed-bug/">http://www.cnet.com/news/how-to-protect-yourself-from-the-heartbleed-bug/</a> </span><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:black;background:#FAFAFA'>)</span> <span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>and how it can leave massive security breaches of usernames, passwords, and credit card numbers.</span><span style='font-family:"Verdana","sans-serif";color:black;background:#FAFAFA'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><b><u><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>What is Heartbleed?</span></u></b><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> Heartbleed is a critical security vulnerability in a widely-used piece of Internet software called OpenSSL. The vulnerability has been around since at least March 2012, but was only recently published. It is unclear whether attackers have been exploiting this vulnerability in the past.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><b><u><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>What OpenSSL does</span></u></b><b><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>.</span></b><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> OpenSSL typically is used on Internet servers to encrypt. For example, when you connect to a web server and you see the little padlock icon in your browser bar that indicates a secure session, that’s often OpenSSL. Think about your secure sessions with banks, credit cards, Google, Facebook, Yahoo, you name it.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><b><u><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>What can an attacker do using OpenSSL?</span></u></b><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> Simply put, the attacker can read the data you exchange with that website, including, for example <u>usernames and passwords</u>, </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>copy it and access any information on your private account.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><b><u><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>So do the attackers have my username and password?</span></u></b><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> Possibly. There’s no way to be sure.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><b><u><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>So what do I do?</span></u></b><b><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> </span></b><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>First, computer servers worldwide need to be patched, but that needs to be done by the companies that own the websites – there is nothing you can or need to do with your computer, smartphone, etc. at this moment. This is a big deal, so companies are patching their webservers right now. In the meantime, pay close attention to your bank accounts, credit cards, etc. and be on the lookout for suspicious activity. Then, on Thursday or Friday, <u>change each and every one of your computer passwords, everywhere</u>. This means your University passwords, your online banking, Facebook, Yahoo, Google, Dropbox – <u>everything<span style='color:#1F497D'>.</span></u><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><b><u><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>Has the University been affected</span></u></b><b><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>? </span></b><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> As discussed above, there is no way to tell if a webserver has been attac<span style='color:#1F497D'>k</span>ed. The University’s primary web servers were not vulnerable to this attack. However, we are reviewing all of our servers, and patching any servers that have this vulnerability. The University will be keeping a close eye on any reports of account compromises. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><b><u><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>Where do I learn more?</span></u></b><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> Just Google “heartbleed” Also, you can contact the <a href="mailto:helpdesk@tamuc.edu">helpdesk</a> with any specific questions.<o:p></o:p></span></li></ul><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>