TurboRater and TurboStorm and the Heartbleed Vulnerability

April 10, 2014 Laird Rixford

The Heartbleed vulnerability within the open source library OpenSSL (CVE-2014-0160) has received a significant amount of attention this week. When this vulnerability is exploited the server might reveal critical data such as user name, passwords, or SSL private key information to an attacker. Many of our customers have asked us whether this vulnerability affects ITC's offerings, specifically TurboRater and TurboStorm. We are happy to confirm that Heartbleed does not affect our rating products and services.

The Long Version

For those who like more than the short and sweet, I will explain further. For all of our servers and products, ITC uses Microsoft technologies for development and hosting. All Windows operating systems and IIS (the web server within Windows) versions do not use OpenSSL but instead use a proprietary encryption component Secure Channel. Load balancers, secure web gateways and firewalls employed within the platform use unaffected technologies and are not vulnerable to Heartbleed.

Proactively, attack vector signatures were added to ITC's intrusion detection devices hours after Heartbleed was discovered. This action allowed us to verify that even if a server was vulnerable to attack, the incident would have been logged and blocked before any data was compromised.

As always, ITC is committed to the security of you and your customer's data. We only use technologies that are supported and accounted for by their respective manufacturers and refrain from using open source technologies that might create a vulnerability that is not actively supported by an interested party.

Finally, many websites and services around the Internet were affected by this critical vulnerability. Please review this site for a comprehensive list of sites that were affected by Heartbleed. If you share a common password with one of the affected websites and ITC's services, we highly recommend you change both passwords immediately.

If you have any questions, feel free to leave them in the comments below or contact us at (800) 383-3482 or support@getitc.com.

Referenced Sources

NIST Vulnerability Summary for CVE-2014-0160
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0160

Information about HeartBleed and IIS
http://blogs.technet.com/b/erezs_iis_blog/archive/2014/04/09/information-about-heartbleed-and-iis.aspx

The Heartbleed Hit List: The Passwords You Need to Change Right Now
http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/

Welcome!

TurboRater and TurboStorm and the Heartbleed Vulnerability

About the Author

Previous Article

Next Article

TurboRater and TurboStorm and the Heartbleed Vulnerability

About the Author

Previous Article

Next Article

Most Recent Articles

This is the Way Cal Durland of IVANS works.

Learn how to identify the types of internet searches that make up the online searchscape and how to adjust your agency's marketing tactics accordingly.

Learn about the basics of pay per click advertising in our upcoming Masters of Marketing webinar, part of a free insurance marketing webinar series hosted by ITC's insurance marketing experts.

Use these three tactics to quickly update your insurance website for the new year.

Pay per click advertising can be a fast way to get more traffic to your insurance website. But if you go in without a plan, it could also be a fast way to waste money.

If your insurance agency wants to reap all the benefits content can bring, from customer service to increased leads, start with a content calendar.

Work smarter, not harder by repurposing existing content your agency already has for future customer emails.

Online reviews give your insurance agency's customers the freedom to leave feedback. And, they give you the freedom to take control of your online reputation.

This is the Way Jeff Arnold of RightSure Insurance Group works.

Here's how to use the content on your insurance agency website homepage and about us page to earn the trust of prospects.

Learn how to optimize your agency's email marketing campaigns with A/B testing in our next Masters of Marketing webinar.

Has your agency fallen behind on its goals? Has your joy for selling insurance fallen by the wayside? Here are four ways to avoid operational pitfalls and get your insurance agency back on track.

Don't spook online prospects with these scary insurance website mistakes.

Don't limit your insurance agency's potential by making these common mistakes.

A drop in your insurance website's traffic can affect the number of visitors and leads coming through your site. Here's what could be causing a recent slowdown in traffic.

A video background for your insurance website's homepage can be an engaging way to keep visitors on your website longer. Or, is a static image the way to go? Here's how to tell.

This is the way Clare DeNicola, co-founder of the10company, works.

Guest blogging is a common way to generate valuable backlinks for your insurance agency website. Our step-by-step guide outlines how to do it the right way.