The OpenSSL flaw called Heartbleed has been a real problem for a lot of website administrators last week. But what is it exactly?

If you are not an administrator or a webmaster, most likely you didn't understand clearly how big this Heartbleed bug is.

To make it simple, this bug allowed to read informations about users without being detected. Basically you had a direct access to see what is going on in the server, in real time.

It's incredible that it took 2 years to detected this bug, and it's probably because who knew about it didn't say anything and used it for his own good. If it's still not clear, you should read this comics made by XKCD which is very simple and clear.




Source: XKCD
via Le Comptoir du Hardware.