Real news from the privacy world

UPDATE: The Heartbleed Bug Has No Affect On NordVPN

In a response to the Heartbleed, NordVPN has changed private keys for all servers. Also, the main NordVPN’s certificate has been revoked and a new one has been added. Our OpenSSL libraries have been upgraded from version 1.0.1e to a safe 1.0.1g.

What potential risk users have been facing?

Potential user detail leaks such as user names and passwords, but this is very unlikely as data that malicious people could get was in random locations in a server memory and user details are not kept in the memory for an entire session.

Servers: Private SSL certificate keys are used to encrypt and decrypt data communications between user and a VPN server. If anyone could have received a certificate and perform man in the middle attack, all data which was sent from a VPN server to the user could have been decrypted.

Nevertheless, we haven’t been reported about any user data leakage using NordVPN’s OpenVPN servers.

The updated server list:

  • Austria-Netherlands Double VPN – updated on 11 April, 2014 09:00 (GMT+0)
  • Sweden-Tor – updated on 11 April, 2014 09:00 (GMT+0)
  • Austria – updated on 11 April, 2014 10:00 (GMT+0)
  • Switzerland – updated on 11 April, 2014 11:00 (GMT+0)
  • Germany – updated on 11 April, 2014 11:00 (GMT+0)
  • Spain – updated on 11 April, 2014 11:00 (GMT+0)
  • France – updated on 11 April, 2014 11:00 (GMT+0)
  • United Kingdom #1 – updated on 11 April, 2014 11:00 (GMT+0)
  • United Kingdom #2 – updated on 11 April, 2014 11:00 (GMT+0)
  • Hong Kong – updated on 11 April, 2014 09:00 (GMT+0)
  • Italy #1 – updated on 11 April, 2014 09:00 (GMT+0)
  • Italy #2 – updated on 11 April, 2014 09:00 (GMT+0)
  • Lithuania – updated on 11 April, 2014 09:00 (GMT+0)
  • Netherlands – updated on 11 April, 2014 10:00 (GMT+0)
  • Poland – updated on 11 April, 2014 11:00 (GMT+0)
  • Romania – updated on 11 April, 2014 11:00 (GMT+0)
  • Russia – updated on 11 April, 2014 09:00 (GMT+0)
  • Sweden – updated on 11 April, 2014 10:00 (GMT+0)
  • Singapore – updated on 11 April, 2014 11:00 (GMT+0)
  • United States – updated on 11 April, 2014 10:00 (GMT+0)


Try NordVPN for Free!

3 days of full security and privacy, with no strings attached

Comments

Your email address will not be published. Required fields are marked *

Leave a Comment

Your email address will not be published. Required fields are marked *