So vpn are not safe anymore ?

With the heartbleed bug that affect all products using openssl, openvpn is currently not secure anymore.
A fix on the way https://forums.openvpn.net/topic15526.html but until all vpn provider apply it, i think it's wise to talk about it here since we are a lot here using this kind of stuff.

I'm no expert and i think it's probably hard to steal accounts while randomly get 64kb chucks of memory from the vpn server, so i wonder if i should stop using vpn for now ?

Do you think that issue can potentially jeopardize ours accounts ?
Is there a way to know if a vpn server is safe or not ?

PS : sorry, my english is bad.

I think your safe. Sides if they do have your account info, they would also need your email, since when you log in from a different IP address it will ask you to change your password. Most Email providers are the same if you try logging in from out of country or just a dif computer.

And what if they use the same vpn ? Same ip right ?

Thats not the case. 2 things cannot have the same IP address at the same time.

You're wrong on your last statement.
When you use a vpn, you have the ip of the vpn.
A vpn can allocate multiple ips, but that's not always the case (and since you are in the same range, that will probably not trigger security anyway)

Your right about the range being the same. But they would also have to vpn to the same location for that to happen. Even then i still have to change my password evey so often because it gives me a slightly dif IP.

anyway if your that worried.

just change your password with it off and dont use it till the fix comes.

use a password token?

problem solved.

Or don't use it at all, since it's against the ToS.

And this is why they tell you not to do it. Oh well, nice confession thread at least.

Quote:

---

Originally Posted by Jess72

use a password token?

problem solved.

---

Problem not solved. They only do so much, and they do not perfectly protect your account.

Token will make troubles to RMT. No wonder the RMT and who use their "services", against it.

The Heartbleed BUG affects the encrytion of the VPN tunnel itself. The data sent through is in the same way safe, that it is without the tunnel.