<div dir="ltr"><div><div class="m_5795034119022844891gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">
<table class="m_5795034119022844891backgroundTable" bgcolor="#ffffff" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td align="left" valign="top">
<table cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="border-top:0px solid rgb(0,0,0);border-bottom:1px solid rgb(255,255,255);background-color:rgb(255,255,255);text-align:center" align="center"><span style="font-size:10px;color:rgb(96,96,96);line-height:200%;font-family:verdana;text-decoration:none">Email not displaying correctly? <a href="http://www.oplin.org/4cast/" style="font-size:10px;color:rgb(0,0,255);line-height:200%;font-family:verdana;text-decoration:none" target="_blank">View it in your browser.</a></span></td>
</tr>
<tr>
<td style="border-top:0px solid rgb(51,51,51);border-bottom:0px solid rgb(255,255,255);background-color:rgb(255,255,255)">
<center><a><img id="m_5795034119022844891editableImg1" src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/4cast_email_header.png" title="OPLIN" alt="OPLIN 4Cast" align="middle" border="0"></a></center>
</td>
</tr>
</tbody>
</table>
<table style="width:763px;height:877px" bgcolor="#ffffff" cellpadding="20" cellspacing="0">
<tbody>
<tr>
<td style="font-size:12px;color:rgb(0,0,0);line-height:150%;font-family:'Gothic Sans',sans-serif" bgcolor="#ffffff" valign="top">
<p> <span style="font-size:20px;font-weight:bold;color:rgb(0,0,0);font-family:arial;line-height:110%">OPLIN 4cast #531: Welcome to the latest internet security disaster...maybe</span><br>
<span style="font-size:11px;font-weight:normal;color:rgb(102,102,102);font-style:italic;font-family:arial">March 1st, 2017</span></p>
<p style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><img align="left" class="m_5795034119022844891alignleft m_5795034119022844891size-full m_5795034119022844891wp-image-6101" src="http://4cast.oplin.org/wp-content/uploads/2017/02/cloudbleed5.png" alt="cloudbleed icon and hashtag" width="130" height="94" style="padding-right: 14px; padding-top: 4px; padding-bottom: 4px;" title=""> Hopefully, last Thursday, you weren't hiding under a rock, because a major news story broke about a serious internet security threat. Dubbed "Cloudbleed," experts deem it to be as huge as the<a href="http://heartbleed.com/" target="_blank"> 2014 Heartbleed bug</a>. Cloudbleed is so named because it originates from Cloudflare, the security company behind some of the largest websites on the net: Uber, Fitbit, Medium and Yelp, for starters (<a href="https://github.com/pirate/sites-using-cloudflare" target="_blank">full list here</a>). <br><br>The good news? Once it was found, it was patched pretty quickly, and experts believe it may not have been widely exploited while it was out in the wild. The bad news? This leak may have been going on from as early as September 2016. How much user information is now online is debatable, and experts aren't even agreeing on whether or not you should change your passwords (our take? Yeah, you should; it can't hurt).</p><div> </div>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="http://fortune.com/2017/02/25/cloudbleed-password-security/" target="_blank">CloudBleed: Should You Reset Your Passwords?</a> [Fortune] "And while Google is reportedly working to scrub its own archives, the data will likely continue floating around in a variety of other public and private caches. That, plus the huge scope and scale of the problem, means that security-conscious web users should reset their passwords—all of them."</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="http://nymag.com/selectall/2017/02/what-is-cloudbleed-cloudflare.html" target="_blank">What You Need to Know About Cloudbleed</a> [Select/All] "Do you have to, as Gizmodo <a href="http://gizmodo.com/cloudbleed-password-memory-leak-cloudflare-1792709635" target="_blank">put it</a>, 'Change Your Passwords. Now'? Not necessarily. Much of that hand-wringing comes from an enormous list of sites that use Cloudflare, whose author admits, “just because a domain is on the list does not mean the site is compromised, and sites may be compromised that do not appear on this list.”</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="http://money.cnn.com/2017/02/24/technology/cloudflare-cloudbleed-security-vulnerability/" target="_blank">Why you shouldn't freak out (yet) about the 'Cloudbleed' security leak</a> [CNN Tech] "Caution is warranted, though. Ryan Lackey, a security entrepreneur who formerly worked at Cloudflare, said since people can't be certain what information, if any, was affected, they may want to change their passwords."</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://www.wired.com/2017/02/crazy-cloudflare-bug-jeopardized-millions-sites/" target="_blank">Massive Bug May Have Leaked User Data From Millions of Sites. So … Change Your Passwords</a> [Wired] "To mitigate whatever risk does remain, security researcher and former Cloudflare employee Ryan Lackey suggests changing every password for every online account, since the “Cloudbleed” leak could have exposed anything."</li>
<div style="text-align:left"> </div>
<p style="text-align:left;font-size:20px;font-family:arial;line-height:110%"><small><strong><em>From the <a href="http://ohioweblibrary.org" target="_blank">Ohio Web Library</a>:</em></strong></small><br>
</p>
<div style="text-align:justify;font-size:16px;font-family:arial;line-height:110%">
<ul> <li><a href="http://search.ebscohost.com.proxy.oplin.org/login.aspx?direct=true&db=pwh&AN=00411460f7c92d2124a67ea0f4cb5f850027" target="_blank">Everything You Need to Know About Cloudbleed, the Latest Internet Security Disaster</a> (<i>FARS News Agency</i><i>Points of View Reference Center</i>, EBSCO<i>host</i> (accessed February 27, 2017)).</li> <li><a href="http://search.ebscohost.com.proxy.oplin.org/login.aspx?direct=true&db=voh&AN=114376451&site=ehost-live" target="_blank">Heartbleed Remains a Risk 2 Years After It Was Reported</a> (Kerner, S. M. (2016). Heartbleed Remains a Risk 2 Years After It Was Reported. <i>Eweek</i>, 3.)</li>
</ul>
<p style="text-align:center">(Featured image from <a href="https://medium.com/@octal/cloudbleed-how-to-deal-with-it-150e907fd165#.f755e9sqp" target="_blank">https://medium.com/@<wbr>octal/cloudbleed-how-to-deal-<wbr>with-it-150e907fd165#.<wbr>f755e9sqp</a>)</p>
</div>
<div style="text-align:left"> </div>
</td>
</tr>
<tr>
<td valign="top" width="760"><span style="font-size:10px;color:rgb(96,96,96);line-height:100%;font-family:verdana"> <hr>
<div style="text-align:justify">The <strong><em>OPLIN 4cast</em></strong> is a weekly compilation of recent headlines, topics, and trends that could impact public libraries. You can subscribe to it in a variety of ways, such as: <br>
</div>
<div style="text-align:left"> </div>
<ul>
<li style="text-align:justify"><strong>RSS feed.</strong> You can receive the OPLIN 4cast via RSS feed by subscribing to the following URL: <a href="http://www.oplin.org/4cast/index.php/?feed=rss2" target="_blank">http://www.oplin.org/4cast/<wbr>index.php/?feed=rss2</a>.</li>
<li style="text-align:justify"><strong>Live Bookmark.</strong> If you're using the Firefox web browser, you can go to the 4cast website (<a href="http://www.oplin.org/4cast/" target="_blank">http://www.oplin.org/4cast/</a>) and click on the orange "radio wave" icon on the right side of the address bar. In Internet Explorer 7, click on the same icon to view or subscribe to the 4cast RSS feed.</li>
<li style="text-align:justify"><strong>E-mail.</strong> You can have the OPLIN 4cast delivered via e-mail (a'la OPLINlist and OPLINtech) by subscribing to the 4cast mailing list at <a href="http://lists.oplin.org/mailman/listinfo/OPLIN4cast" target="_blank">http://lists.oplin.org/<wbr>mailman/listinfo/OPLIN4cast</a>.</li>
</ul> </span> </td>
</tr>
<tr>
<td style="text-align:center;font-family:'Century Gothic',sans-serif;border-top:0px solid rgb(255,255,255);background-color:#2c4587;color:#fff" valign="top" width="760">© 2016 Ohio Public Library Information Network<br> <a href="http://www.slideshare.net/oplin" title="Find us on Slideshare" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/slideshare3.png" alt="Find us on Slideshare"></a> <a href="http://www.facebook.com/oplin.org" title="Find us on Facebook" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/facebook_0.png" alt="Find us on Facebook"></a> <a href="https://plus.google.com/107751358238995507967" title="Find us on Google+" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/google+.png" alt="Find us on Google+"></a> <a href="http://www.twitter.com/oplin" title="Find us on Twitter" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/twitter_0.png" alt="Find us on Twitter"></a> </td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div></div></div></div></div></div></div>
</div>