Neel Mehta

@neelmehta How certain are you about that?

Can we panic now? @neelmehta https://www.cloudflarechallenge.com/heartbleed  #Heartbleed

@neelmehta Hey Neel. Do you still feel that private key exposure is unlikely? Just wondering if your thinking has changed in the past days.

@neelmehta @bsdaemon Don't panic? Really? http://blog.erratasec.com/2014/04/600000-servers-vulnerable-to-heartbleed.html … #heartbleed

@neelmehta Aren't you giving people false hope here? I'd recommend immediate private key replacement for vulnerable servers.

@neelmehta during out tests yesterday we did find parts of private keys in memory. Reconstruction _might_ be possible from multiple dumps.

@neelmehta @j4cob Sometimes "unlikely" Just Isn't Good Enough. Yes, your underwear should be turning that color right now.

@neelmehta Exposing parameters of previous requests was bad enough.

@neelmehta All systems or some? How likely? More info?

@neelmehta thanks for this comment. I wasn't sure of this and doubting that keys could be exposed. I think I may still update my keys tho!:)

@neelmehta @lsmith still, banks and other likely targets should definitely revoke their certificates and create new ones...

@neelmehta Any details?