TurboRater and TurboStorm and the Heartbleed Vulnerability

April 10, 2014 Laird Rixford

The Heartbleed vulnerability within the open source library OpenSSL (CVE-2014-0160) has received a significant amount of attention this week. When this vulnerability is exploited the server might reveal critical data such as user name, passwords, or SSL private key information to an attacker. Many of our customers have asked us whether this vulnerability affects ITC's offerings, specifically TurboRater and TurboStorm. We are happy to confirm that Heartbleed does not affect our rating products and services.

The Long Version

For those who like more than the short and sweet, I will explain further. For all of our servers and products, ITC uses Microsoft technologies for development and hosting. All Windows operating systems and IIS (the web server within Windows) versions do not use OpenSSL but instead use a proprietary encryption component Secure Channel. Load balancers, secure web gateways and firewalls employed within the platform use unaffected technologies and are not vulnerable to Heartbleed.

Proactively, attack vector signatures were added to ITC's intrusion detection devices hours after Heartbleed was discovered. This action allowed us to verify that even if a server was vulnerable to attack, the incident would have been logged and blocked before any data was compromised.

As always, ITC is committed to the security of you and your customer's data. We only use technologies that are supported and accounted for by their respective manufacturers and refrain from using open source technologies that might create a vulnerability that is not actively supported by an interested party.

Finally, many websites and services around the Internet were affected by this critical vulnerability. Please review this site for a comprehensive list of sites that were affected by Heartbleed. If you share a common password with one of the affected websites and ITC's services, we highly recommend you change both passwords immediately.

If you have any questions, feel free to leave them in the comments below or contact us at (800) 383-3482 or support@getitc.com.

Referenced Sources

NIST Vulnerability Summary for CVE-2014-0160
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0160

Information about HeartBleed and IIS
http://blogs.technet.com/b/erezs_iis_blog/archive/2014/04/09/information-about-heartbleed-and-iis.aspx

The Heartbleed Hit List: The Passwords You Need to Change Right Now
http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/

Market, manage and grow your agency with our expert advice

TurboRater and TurboStorm and the Heartbleed Vulnerability

About the Author

Previous Article

Next Article

TurboRater and TurboStorm and the Heartbleed Vulnerability

About the Author

Previous Article

Next Article

Most Recent Articles

Look to these noteworthy marketing statistics when planning your insurance agency's next marketing move.

These are the ACORD forms we've updated from January 2020 for the users of our agency management system InsurancePro.

This is the way Mike Skeele of Skeele Insurance Agency works.

In business, as in anything else, some things are worth the wait. Your insurance agency's digital marketing work is one of these things.

Enhancing your insurance agency's email marketing is as easy as A-B-C.

Connecting with Centers of Influence can positively affect your lead acquisition. Insurance agents share prospects with realtors, loan officers, title agents, etc. Why not team up for mutual success?

Here's how your insurance agency can leverage highly engaging Instagram Stories to connect with insurance prospects in a new way.

Follow Google's quality guidelines to help your insurance agency ads appear at the top of search results while spending less money.

The data you get out of your agency management system is only as good as the data you put into it. Here's how to fix the data in your management system.

Is your insurance agency website receiving a good amount of online traffic, but not many conversions? Here's what you can do to get a high-converting website.

Use a standard PowerPoint template at your insurance agency to present a cohesive and professional brand experience.

This is the way Stu Durland of Seely & Durland Insurance works.

Add one of these new social media trends to your insurance agency's marketing plan in 2020.

Learn how your agency can get started with an insurance website redesign during this month’s free Masters of Marketing webinar.

Dirty data can interfere with your email marketing efforts. Try these data hygiene habits to clean up your agency's database.

Will your insurance agency be affected by the CCPA?

ACORD has recently making changes to its licensing model for forms. As of January 1, 2020, agencies are required to have a direct licensing relationship with ACORD.

With the Virtual Employee, you can create unlimited automations to improve prospect and customer relations, while streamlining the operations of your agency.