So vpn are not safe anymore ?

[Ravno]

With the heartbleed bug that affect all products using openssl, openvpn is currently not secure anymore.
A fix on the way https://forums.openvpn.net/topic15526.html but until all vpn provider apply it, i think it's wise to talk about it here since we are a lot here using this kind of stuff.

I'm no expert and i think it's probably hard to steal accounts while randomly get 64kb chucks of memory from the vpn server, so i wonder if i should stop using vpn for now ?

Do you think that issue can potentially jeopardize ours accounts ?
Is there a way to know if a vpn server is safe or not ?

PS : sorry, my english is bad.

[o3o]

I think your safe. Sides if they do have your account info, they would also need your email, since when you log in from a different IP address it will ask you to change your password. Most Email providers are the same if you try logging in from out of country or just a dif computer.

[Ravno]

And what if they use the same vpn ? Same ip right ?

[o3o]

Thats not the case. 2 things cannot have the same IP address at the same time.

[Ravno]

You're wrong on your last statement.
When you use a vpn, you have the ip of the vpn.
A vpn can allocate multiple ips, but that's not always the case (and since you are in the same range, that will probably not trigger security anyway)

[o3o]

Your right about the range being the same. But they would also have to vpn to the same location for that to happen. Even then i still have to change my password evey so often because it gives me a slightly dif IP.

anyway if your that worried.

just change your password with it off and dont use it till the fix comes.

[Jess72]

use a password token?

problem solved.

[MurakumoMillennium]

Or don't use it at all, since it's against the ToS.

And this is why they tell you not to do it. Oh well, nice confession thread at least.

use a password token?

problem solved.

Problem not solved. They only do so much, and they do not perfectly protect your account.

[LalaRu]

Token will make troubles to RMT. No wonder the RMT and who use their "services", against it.

[KarstenS]

The Heartbleed BUG affects the encrytion of the VPN tunnel itself. The data sent through is in the same way safe, that it is without the tunnel.