Talk:1354: Heartbleed Explanation - Revision history

146.70.174.163 at 12:52, 13 February 2026

2026-02-13T12:52:47Z

Bb777: sorry 'bout the trouble

2025-04-26T16:01:37Z

sorry 'bout the trouble

Bb777 at 01:47, 23 March 2025

2025-03-23T01:47:09Z

An user who has no account yet at 15:55, 6 September 2023

2023-09-06T15:55:54Z

172.70.91.78 at 09:47, 18 August 2022

2022-08-18T09:47:05Z

172.70.117.38 at 21:58, 18 July 2021

2021-07-18T21:58:53Z

173.245.62.126 at 09:42, 30 June 2015

2015-06-30T09:42:29Z

XndrK: Add counterargument for character being Danish

2014-12-28T19:56:30Z

Add counterargument for character being Danish

MGitsfullofsheep: pabr.org contains a very interesting list of attack cases.

2014-09-09T12:53:21Z

pabr.org contains a very interesting list of attack cases.

173.245.55.65: Respond to Black Hat Guy comment.

2014-04-17T23:48:43Z

Respond to Black Hat Guy comment.

← Older revision		Revision as of 12:52, 13 February 2026
Line 50:		Line 50:

	this gotta be the best explanation ever of this bug [[User:An user who has no account yet\|An user who has no account yet]] ([[User talk:An user who has no account yet\|talk]]) 15:55, 6 September 2023 (UTC)		this gotta be the best explanation ever of this bug [[User:An user who has no account yet\|An user who has no account yet]] ([[User talk:An user who has no account yet\|talk]]) 15:55, 6 September 2023 (UTC)
		+
		+	Looking back from the future, this was ''such'' an obvious bug it really does make one a bit suspicious. It's basically a read version of a buffer overrun, which relies on the server trusting user supplied data without verifying it. Both are such well-known security exploits it really does make you wonder how someone could put it in by accident. [[Special:Contributions/146.70.174.163\|146.70.174.163]] 12:52, 13 February 2026 (UTC)

@@ Line 4: / Line 4: @@
 ::The IP most certainly does not represent anything because it is invalid. Three of the octets are >255. [[User:Dan|Dan]] 21:19, 14 April 2014 (UTC)
 :::It does not refer to anything as an IP address. It can still represent something that is not a real IP address - fake IP addresses with four random non-octet numbers are far from unheard of in Hollywood products (e.g, Iron Man 3: 936.345.643.21) [[User:Amadan|Amadan]] ([[User talk:Amadan|talk]]) 03:45, 15 April 2014 (UTC)
-::::guys check the map of the internet --[[User:Bb777|(((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((]] ([[User talk:Bb777|talk]]) 01:47, 23 March 2025 (UTC)
+::::guys check the map of the internet --[[User:Bb777|((((((((((((([...](((((]] ([[User talk:Bb777|talk]]) 01:47, 23 March 2025 (UTC)
 While the bug is explained very good, there is one point missing: The word "user" seems to imply that Meg is known to server. But the bug doesn't require that - ANYONE can ask the server. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 11:03, 11 April 2014 (UTC)
 : Nope, the word "user" does not indicate a logged in user. It's just a reference to anybody who happens to "use" (actually: connect to) the server at the moment. In fact, it is a particular network connection (TCP or else), on which other end there is a "user" Meg. -- [[Special:Contributions/108.162.210.111|108.162.210.111]] 12:07, 11 April 2014 (UTC)

@@ Line 4: / Line 4: @@
 ::The IP most certainly does not represent anything because it is invalid. Three of the octets are >255. [[User:Dan|Dan]] 21:19, 14 April 2014 (UTC)
 :::It does not refer to anything as an IP address. It can still represent something that is not a real IP address - fake IP addresses with four random non-octet numbers are far from unheard of in Hollywood products (e.g, Iron Man 3: 936.345.643.21) [[User:Amadan|Amadan]] ([[User talk:Amadan|talk]]) 03:45, 15 April 2014 (UTC)
+::::guys check the map of the internet --[[User:Bb777|(((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((]] ([[User talk:Bb777|talk]]) 01:47, 23 March 2025 (UTC)
 While the bug is explained very good, there is one point missing: The word "user" seems to imply that Meg is known to server. But the bug doesn't require that - ANYONE can ask the server. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 11:03, 11 April 2014 (UTC)
 : Nope, the word "user" does not indicate a logged in user. It's just a reference to anybody who happens to "use" (actually: connect to) the server at the moment. In fact, it is a particular network connection (TCP or else), on which other end there is a "user" Meg. -- [[Special:Contributions/108.162.210.111|108.162.210.111]] 12:07, 11 April 2014 (UTC)

← Older revision		Revision as of 15:55, 6 September 2023
Line 48:		Line 48:

	Not gonna [https://www.explainxkcd.com/wiki/index.php?title=1354:_Heartbleed_Explanation&curid=14548&diff=293068&oldid=273249 edit-war this revert], but a "note book" is the {{wiktionary\|note book\|less standard}} version (and makes me think more of a "{{wiktionary\|scrapbook}}", or even where I might secrete a secret stash of (bank)notes interleved with the pages of the most boring novel on my bookshelf, than a "writing pad"), of what is monatomically a "notebook" in standard English (and even American...). Even after considering notepad (or writing pad, reporter's pad or even "pad" in its own, amongst others) the pen-not-stylus mentioned should be enough, more so than notepad (with confusion with "tablet", both ancient and modern), to read better ''and'' unambiguously. But clearly my whole internal monalogue prior to/during editing (which was much too long/boring to inflict in whole in the summary) isn't as conclusively apparent as I thought. ;) But I feel more strongly about it than I realised, so just making this little note (not upon a pad...) to get it out of my system. Finis. [[Special:Contributions/172.70.91.78\|172.70.91.78]] 09:47, 18 August 2022 (UTC)		Not gonna [https://www.explainxkcd.com/wiki/index.php?title=1354:_Heartbleed_Explanation&curid=14548&diff=293068&oldid=273249 edit-war this revert], but a "note book" is the {{wiktionary\|note book\|less standard}} version (and makes me think more of a "{{wiktionary\|scrapbook}}", or even where I might secrete a secret stash of (bank)notes interleved with the pages of the most boring novel on my bookshelf, than a "writing pad"), of what is monatomically a "notebook" in standard English (and even American...). Even after considering notepad (or writing pad, reporter's pad or even "pad" in its own, amongst others) the pen-not-stylus mentioned should be enough, more so than notepad (with confusion with "tablet", both ancient and modern), to read better ''and'' unambiguously. But clearly my whole internal monalogue prior to/during editing (which was much too long/boring to inflict in whole in the summary) isn't as conclusively apparent as I thought. ;) But I feel more strongly about it than I realised, so just making this little note (not upon a pad...) to get it out of my system. Finis. [[Special:Contributions/172.70.91.78\|172.70.91.78]] 09:47, 18 August 2022 (UTC)
		+
		+	this gotta be the best explanation ever of this bug [[User:An user who has no account yet\|An user who has no account yet]] ([[User talk:An user who has no account yet\|talk]]) 15:55, 6 September 2023 (UTC)

← Older revision		Revision as of 09:47, 18 August 2022
Line 46:		Line 46:

	To understand better how far this goes, [http://www.pabr.org/heartbleedtax/heartbleedtax.en.html A taxonomy of Heartbleed attacks] contains a very interesting list of attack cases. --[[User:MGitsfullofsheep\|MGitsfullofsheep]] ([[User talk:MGitsfullofsheep\|talk]]) 12:53, 9 September 2014 (UTC)		To understand better how far this goes, [http://www.pabr.org/heartbleedtax/heartbleedtax.en.html A taxonomy of Heartbleed attacks] contains a very interesting list of attack cases. --[[User:MGitsfullofsheep\|MGitsfullofsheep]] ([[User talk:MGitsfullofsheep\|talk]]) 12:53, 9 September 2014 (UTC)
		+
		+	Not gonna [https://www.explainxkcd.com/wiki/index.php?title=1354:_Heartbleed_Explanation&curid=14548&diff=293068&oldid=273249 edit-war this revert], but a "note book" is the {{wiktionary\|note book\|less standard}} version (and makes me think more of a "{{wiktionary\|scrapbook}}", or even where I might secrete a secret stash of (bank)notes interleved with the pages of the most boring novel on my bookshelf, than a "writing pad"), of what is monatomically a "notebook" in standard English (and even American...). Even after considering notepad (or writing pad, reporter's pad or even "pad" in its own, amongst others) the pen-not-stylus mentioned should be enough, more so than notepad (with confusion with "tablet", both ancient and modern), to read better ''and'' unambiguously. But clearly my whole internal monalogue prior to/during editing (which was much too long/boring to inflict in whole in the summary) isn't as conclusively apparent as I thought. ;) But I feel more strongly about it than I realised, so just making this little note (not upon a pad...) to get it out of my system. Finis. [[Special:Contributions/172.70.91.78\|172.70.91.78]] 09:47, 18 August 2022 (UTC)

← Older revision		Revision as of 09:42, 30 June 2015
Line 27:		Line 27:

	Why has everyone here missed the reference to Portal 2? It almost seems so obvious :). [[User:YetAnotherGeek\|YetAnotherGeek]] ([[User talk:YetAnotherGeek\|talk]]) 09:23, 12 April 2014 (UTC)		Why has everyone here missed the reference to Portal 2? It almost seems so obvious :). [[User:YetAnotherGeek\|YetAnotherGeek]] ([[User talk:YetAnotherGeek\|talk]]) 09:23, 12 April 2014 (UTC)
		+	:"Are you still there?" could also be a reference to the turrets in Portal / Portal 2 [[Special:Contributions/173.245.62.126\|173.245.62.126]] 09:42, 30 June 2015 (UTC)

	Are we sure that the hacker in the comic is Megan? She has long, curly hair as opposed to short straight hair. Considering she has long hair and has malicious intent, she might be Danish. {{unsigned ip\|108.162.216.71}}		Are we sure that the hacker in the comic is Megan? She has long, curly hair as opposed to short straight hair. Considering she has long hair and has malicious intent, she might be Danish. {{unsigned ip\|108.162.216.71}}

@@ Line 30: / Line 30: @@
 Are we sure that the hacker in the comic is Megan? She has long, curly hair as opposed to short straight hair. Considering she has long hair and has malicious intent, she might be Danish. {{unsigned ip|108.162.216.71}}
 :The server refers to her as "Meg", and if she were spoofing the source address, the packets wouldn't go back to her. That would be an amplification DoS attack. --[[Special:Contributions/108.162.246.4|108.162.246.4]] 22:42, 13 April 2014 (UTC)
 Has anybody figured out what the selfie.jpg contents reaaly are? It isn't a valid JPG because the magic numbers don't match, and it isn't ASCII text because multiple bytes have the most significant bit set. [[Special:Contributions/108.162.215.45|108.162.215.45]] 07:52, 13 April 2014 (UTC)

← Older revision		Revision as of 12:53, 9 September 2014
Line 40:		Line 40:

	I think that "potato" and "bird" are a reference to portal 2, (possibly) how the computer cores constantly malfunction. [[User:mailmindlin\|mailmindlin]]		I think that "potato" and "bird" are a reference to portal 2, (possibly) how the computer cores constantly malfunction. [[User:mailmindlin\|mailmindlin]]
		+
		+
		+	To understand better how far this goes, [http://www.pabr.org/heartbleedtax/heartbleedtax.en.html A taxonomy of Heartbleed attacks] contains a very interesting list of attack cases. --[[User:MGitsfullofsheep\|MGitsfullofsheep]] ([[User talk:MGitsfullofsheep\|talk]]) 12:53, 9 September 2014 (UTC)

← Older revision		Revision as of 23:48, 17 April 2014
Line 37:		Line 37:

	I don't know about "potato" and "bird", but "hat" could possibly be a reference to Black Hat Guy, who often creates havoc to prove a point. Also, completely separately from Black Hat Guy, in security discussions, attackers are broken up between black hat ("bad") and white hat ("good") hackers. So "hat" could be a sort of generic reference for a hacker. {{unsigned ip\|199.27.128.116}}		I don't know about "potato" and "bird", but "hat" could possibly be a reference to Black Hat Guy, who often creates havoc to prove a point. Also, completely separately from Black Hat Guy, in security discussions, attackers are broken up between black hat ("bad") and white hat ("good") hackers. So "hat" could be a sort of generic reference for a hacker. {{unsigned ip\|199.27.128.116}}
		+	:Black Hat Guy is not completely separate. He wears a black hat because he is a black hat hacker. [[Special:Contributions/173.245.55.65\|173.245.55.65]] 23:48, 17 April 2014 (UTC) TooMuchBlue

	I think that "potato" and "bird" are a reference to portal 2, (possibly) how the computer cores constantly malfunction. [[User:mailmindlin\|mailmindlin]]		I think that "potato" and "bird" are a reference to portal 2, (possibly) how the computer cores constantly malfunction. [[User:mailmindlin\|mailmindlin]]