日々更新mobilerA8（Yahoo!ニュースを毎日ウォッチ）

ハートブリードバグ、OpenSSLのバグも使いようで、サイバー窃盗犯のサイトも解読できると。
逆に、サイバー窃盗犯もいろいろ情報はとれるということ。
収束を願うばかりだが、サーバー側が対応しないとどうしようもないところがある。

BBCより。
Heartbleed used to uncover data from cyber-criminals
http://www.bbc.com/news/technology-27203766

OpenSSL―暗号・PKI・SSL/TLSライブラリの詳細― 新品価格 ￥4,536から (2014/4/30 08:42時点)

「第５の戦場」 サイバー戦の脅威（祥伝社新書２６６） 新品価格 ￥842から (2014/4/30 08:44時点)

核を超える脅威 世界サイバー戦争　 見えない軍拡が始まった 新品価格 ￥1,836から (2014/4/30 08:44時点)

The Heartbleed bug has turned cyber criminals from attackers into victims as researchers use it to grab material from chatrooms where they trade data.

Discovered in early April, Heartbleed lets attackers steal data from computers using vulnerable versions of some widely used security programs.

Now it has given anti-malware researchers access to forums that would otherwise be very hard to penetrate.

The news comes as others warn that the bug will be a threat for many years.

French anti-malware researcher Steven K told the BBC: "The potential of this vulnerability affecting black-hat services (where hackers use their skills for criminal ends) is just enormous."

Heartbleed had put many such forums in a "critical" position, he said, leaving them vulnerable to attack using tools that exploit the bug.

The Heartbleed vulnerability was found in software, called Open SSL, which is supposed to make it much harder to steal data. Instead, exploiting the bug makes a server hand over small chunks of the data it has just handled - in many cases login details or other sensitive information.

Mr K said he was using specially written tools to target some closed forums called Darkode and Damagelab.

"Darkode was vulnerable, and this forum is a really hard target," he said. "Not many people have the ability to monitor this forum, but Heartbleed exposed everything."•••

−ログインデータを盗むことができるのが、ハートブリードバグというもので、とてもたちが悪い。
　悪人逮捕のためにもなるが、善人も同じリスクがあるということだ。