Critical crypto bug exposes Yahoo Mail passwords Russian-roulette style

OpenSSL defect still exposing sensitive data even after patch is released.

Read the whole story

 

[Roguish]

invertigo[/url]":1tw8hkaq]

RRob[/url]":1tw8hkaq]You could have used Yahoo as an example without making the article title suggest it's an issue particular to them.

Yahoo was significantly slower (like 17 hours or so) to patch than any of the other major email providers.

Does this mean they are now in fact patched? I see their cert with a valid date of 4/7, and this story written just an hour and a half ago is warning you against logging in to Yahoo.

I just want to make sure when I should finally bother changing my password.