{"id":24019,"date":"2014-04-15T13:29:40","date_gmt":"2014-04-15T23:29:40","guid":{"rendered":"http:\/\/www.hawaii.edu\/news\/?p=24019"},"modified":"2020-05-19T16:10:07","modified_gmt":"2020-05-20T02:10:07","slug":"impact-of-heartbleed-security-flaw-on-uh","status":"publish","type":"post","link":"https:\/\/www.hawaii.edu\/news\/2014\/04\/15\/impact-of-heartbleed-security-flaw-on-uh\/","title":{"rendered":"Impact of Heartbleed security flaw on UH<\/abbr>"},"content":{"rendered":"Reading time: <\/span> 2<\/span> minutes<\/span><\/span>

\"heartbleed<\/p>\n

A major security vulnerability named Heartbleed was disclosed on April 7, 2014. UH<\/abbr> Information Technology Services (ITS<\/abbr>) has assessed the impact of the vulnerability for primary UH<\/abbr> services and is offering guidance to users.<\/p>\n

The latest information is posted online at hawaii.edu\/infosec<\/a> and a summary is below.<\/p>\n

Do I need to change my UH<\/abbr> username password?<\/h2>\n

A few UH<\/abbr> services were affected by the Heartbleed vulnerability. Users of those services will be contacted directly to change their passwords.<\/p>\n

No core UH<\/abbr> system services are vulnerable at this time so no password change is required for most UH<\/abbr> users. Unaffected<\/strong> services include: Banner, Kuali Financial Services, Peoplesoft, Laulima, Google@UH<\/abbr> and the systems used to login to these services.<\/p>\n

The list of services and the impact of the Heartbleed bug is available at hawaii.edu\/infosec\/heartbleed<\/a>. You will need to login with your UH<\/abbr> username and password to view the page.<\/p>\n

You may also be notified by your campus or department to change your UH<\/abbr> password if it may have been exposed through their server or service.<\/p>\n

Reminder: Protect your UH<\/abbr> password!<\/h2>\n

Do NOT use your UH<\/abbr> username and password to login to any non-UH<\/abbr> website, and do not use the same login and password for any other services.<\/p>\n

If you did use your UH<\/abbr> credentials to login to any vulnerable website, you should change your UH<\/abbr> password using the UH<\/abbr> One-Step Password Change page<\/a>.<\/p>\n

Be on the alert for phishing attempts<\/h2>\n

Watch for fraudulent email claiming to be from UH<\/abbr> or other companies with which you do business. Criminals will use this as an opportunity to create targeted phishing email messages to trick people into divulging their passwords.<\/p>\n

ITS<\/abbr> will NEVER ask for your password in an unsolicited email. Be on the lookout for sites that purport to tell you whether your site or your information has been compromised, especially if they demand personal details, login credentials, or payment.<\/p>\n

If you are in doubt at all about a request, contact the ITS<\/abbr> Help Desk<\/a>.<\/p>\n

What about my personal accounts such as Facebook, Twitter, etc.?<\/h2>\n

CNET<\/abbr> is maintaining a list of the top 100 web sites and their status<\/a>.<\/p>\n

If you logged-in to any website listed as vulnerable or if you have been notified by the service, you should change your password AFTER the website has been fixed. If you are not sure if a site was vulnerable or if it has been fixed, you can check the website using the Heartbleed test site<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

ITS<\/abbr> recommendations regarding the Heartbleed vulnerability and UH<\/abbr> services.<\/p>\n","protected":false},"author":16,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26,3],"tags":[152,947],"class_list":["post-24019","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-community","category-faculty-staff","tag-information-technology-services","tag-uh-system","entry","has-media"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t