NSA Said to Have Used Heartbleed Bug, Exposing Consumers

[Erich Bloodaxe BSN]

66. The vulnerability is

apparently in the server software, not your own machine (unless you serve up websites or other servers from your machine, such as a database, for instance). As such, it doesn't really matter if your machine (the 'client') uses linux, windows, or whatever.

I'd change passwords on major sites first, especially your email password, since most other sites send your change requests to the email address on file. Then I'd change credit card and banking site passwords, then bills you pay online.

But let's face it, bugs like this reveal the flaw in simply having to sign in with accounts at so many different websites - if you're like me, you've got all sorts of passwords on accounts on websites you may have used exactly once in your life, to order something online, including sites you to which you never plan to return, but offered you no ability to delete your account, or to set them to 'disable all logins on account'.