Hi Matt,

Fast pickup, good luck tracking them down. Did you test the vulnerability of 
creativecommons.org. I read about http://filippo.io/Heartbleed/ which claims to 
be able to check  vulnerability.

I had a discussion once with Dan about the services by Creative Commons, he had 
a list of all domains hosted under creativecommons.org. You should probably 
check that list if you haven't already. 

I tried going to https://search.creativecommons.org but got directed to 
https://api.creativecommons.org/ which had an expired certificate. Don’t know 
if that is related

Cheers,

Maarten
-- 
Kennisland  | www.kennisland.nl | t +31205756720 | m +31643053919 | @mzeinstra

On 8 Apr 2014 at 19:00:19 , Matt Lee ([email protected]) wrote:

My timing is great -- take over all the machines, and now I have to  
patch a bunch of them against the Heartbeat SSL vulnerability.  

Luckily(?) many of them are on Debian Squeeze, which is too old to be  
affected. I'll be reissuing the SSL certificate anyway, for the donate  
and main websites.  

Let me know if there's any SSL sites under creativecommons.org that  
aren't working as they should and I'll get on it.  

Best,  

matt  
_______________________________________________  
cc-devel mailing list  
[email protected]  
http://lists.ibiblio.org/mailman/listinfo/cc-devel  
_______________________________________________
cc-devel mailing list
[email protected]
http://lists.ibiblio.org/mailman/listinfo/cc-devel

Reply via email to