Definition: In this task, you are given a text of many news articles seperated by special token "|||||". Your task is to summarize them.
Input: German computer programmer Robin Seggelman has been outed as the man whose coding mistake, now known as Heartbleed, has left millions of internet users and thousands of websites vulnerable to hackers. 
  
 SHARE 
  
 Share on Facebook SHARE 
  
 Share on Twitter TWEET 
  
 Link Heartbleed is a programming flaw in Heartbeat, an extension for OpenSSL, itself an encryption tool to help make websites and online communication more secure. 
  
 The discovery, by a Google engineer and Finnish security firm Codenomicon, has prompted experts to call on people to change their passwords to most, if not all, websites they subscribe to after site owners have fixed their vulnerabilities. 
  
 Dr Seggelman, 31, from the small town of Oelde in north-west Germany, is a contributor to the Internet Engineering Task Force (IETF), a not-for-profit global group whose mission is to make the internet work better. He is attached to the Munster University of Applied Sciences in Germany, where, as research associate in the networking programming lab in the department of electrical engineering and computer science, he has published a number of papers, including his thesis on strategies to secure internet communications in 2012. He has been writing academic papers and giving talks on security matters since 2009, while still a PhD student. 
  
 His academic research influence index score of two, based on the number of scientific citations of his work, suggests an influential thinker at the early stages of his scientific career. 
  
 According to his Xing profile, Dr Seggelman has worked for Deutsche Telekom IT services subsidiary T-Systems, possibly the largest such consultancy in Germany, since 2012, as a solutions architect. 
  
 Advertisement 
  
 Is this a man who would purposefully leave a gaping hole in the internet, which the US National Security Agency could have been exploiting to spy on people's communications? 
  
 Dr Seggelman denied this in an interview with Fairfax Media on Thursday. He said: "It's tempting to assume that, after the disclosure of the spying activities of the NSA and other agencies, but in this case it was a simple programming error in a new feature, which unfortunately occurred in a security-relevant area. 
  
 "It was not intended at all, especially since I have previously fixed OpenSSL bugs myself, and was trying to contribute to the project," he said. 
  
 OpenSSL is an open-source software project. Open-source projects are by their nature open to others to contribute. No one owns the code; no one is liable. 
  
 Willy Susilo, director of the Centre for Computer and Information Security Research at the University of Wollongong, said computer science students are encouraged to contribute to open source and are taught the ethics of the movement. They are taught to take their role responsibly, with the pressure to get it right looming higher depending on the project they are working on. But they also know that someone else in the community will review their work. 
  
 In the case of Heartbleed, the reviewer, Dr Stephen Henson, a UK consultant on OpenSSL, also missed the mistake. 
  
 Professor Susilo said that is not unusual. "It was just a development mistake when creating the algorithm. It's a serious mistake but a normal mistake." 
  
 He points to another encryption coding mistake discovered in 2004 on a version of GNU Privacy Guard, itself a version of Pretty Good Privacy, a popular email encryption tool. 
  
 Phong Q. Nguyen, Author of the GNUPG paper Phong Q. Nguyen noted that "bad cryptography is much more frequent than good cryptography", and the "fact that a source code can be read does not imply that it is actually read, especially by cryptography experts". 
  
 "A reviewer would only look at the way [the algorithm] works, not at the code of the program that was submitted. The same happened with GNUPG, the reviewer accepted the code." 
  
 Professor Dr Michael Tuexen who supervised Dr Seggelmann's PhD told Fairfax Media Heartbleed was a mistake, a "small bug with a huge impact. Nothing less, nothing more." 
  
 "Please note that he initially also fixed several bugs in the OpenSSL. Most of the submitted patches were finally accepted by the project. So adding the feature was not his first patch. Unfortunately, this patch contained the bug," Dr Tuexen said. 
  
 Meanwhile, Dr Seggelmann evaded questions on how he feels about being the author of such an infamous mistake and what it means for his current and future work. In an indication that he may fear the repercussions, he instead requested Fairfax Media not use any photos of him, although some are publicly available on the internet. 
  
 "It does not help anyone if this bug is associated with me personally," he said. 
  
 And he suggested that the more contributors to the open-source movement, the better the chance of mistakes being averted. 
  
 "I would prefer that you use the opportunity to make people aware that security is an important issue, and that incidents like this can best be prevented by more people participating in development and reviews of security-relevant software." 
  
 Professor Susilo said the open-source movement had already mobilised to fix the fault and it was now up to individual websites using the OpenSSL encryption to patch their systems. 
  
 "There is no one to blame. The code is always evolving," he said. 
  
 He reminded people to change passwords on all sites they subscribe to as it was just about impossible for individual users to tell which sites used OpenSSL. 
  
 Mashable has compiled a handy chart to guide users. Change passwords now for: Facebook, Instagram, Pinterest, Tumblr, Google, Yahoo, Dropbox, Minecraft and Amazon Web Services. 
  
 with Ben Grubb 
  
 Follow IT Pro on Twitter ||||| When it comes to online security, Neel Mehta puts his money where his mouse is. 
  
 The Google Security researcher boosted a fundraiser for online privacy tools past its $100,000 goal by donating the $15,000 reward he received for helping to expose the Heartbleed bug. 
  
 The Freedom of the Press Foundation launched the fundraiser in December to support encryption tools that journalists and others can use to protect digital communications. 
  
 “We are very grateful to Neel’s donation,” Trevor Timm, the Freedom of the Press Foundation’s executive director, told the Daily Dot in an email. “These encryption tools are incredibly underfunded and this money will go to making the Internet a safer and more secure place.” 
  
 Thanks to @neelmehta‘s donation, we’ve now raised over $100,000 for a group of great open-source encryption tools: https://t.co/s2D3VEc8Gv — Trevor Timm (@trevortimm) April 9, 2014 
  
 Timm said Mehta went with the default option on the fundraiser’s page to divide his donation equally between four tools—the LEAP Encryption Access Project, Open WhisperSystems, the TAILS secure operating system and the Tor Project. Contributors also had the option to donate to the Foundation’s own SecureDrop, which allows whistleblowers to securely submit information to media organizations. 
  
 After “subtracting what the credit card companies take,” said Timm, the total amounts divided between each of the tools are as follows: 
  
 Open WhisperSystems: $19,149.49 
  
 TAILS: $22,351.05 
  
 LEAP Encryption Access Project: $17,665.12 
  
 Tor Project: $19,632.20 
  
 SecureDrop: $14,403.08 
  
 Five percent of all donations ($6,286.28) went toward the foundation’s operating costs. 
  
 This is the fourth time since December 2012 that Freedom of the Press Foundation fundraisers have procured more than $100,000 for causes such as WikiLeaks and other journalistic organizations, and to hire a stenographer to produce transcripts of the trial of Chelsea Manning, then known as Bradley Manning, for the public. 
  
 It’s common for people who expose security flaws, often referred to as “white hat hackers,” to receive rewards for their work. In October, Microsoft paid $100,000 to British security researcher James Forshaw for uncovering a security bug in Windows 8.1. 
  
 A group called the Internet Bug Bounty, which offers cash to those who expose security flaws in software critical to the Internet’s existence, rewarded Mehta for catching the cause of Heartbleed—a problem with OpenSSL, a cryptographic protocol that secures data exchanged between websites and servers. 
  
 The minimum reward offered for finding a flaw with OpenSSL is $2,500, but Mehta received six times as much, presumably due to the severity of the bug he helped expose. Security guru Bruce Schneier called Heartbleed “a catastrophic bug” and said, “On the scale of 1 to 10, this is an 11.” 
  
 The 2-year-old bug is thought to have affected nearly two-thirds of the Web. If attackers were aware of the bug, which is still unclear, they could have stolen a frightening number of users’ login information from sites ranging from social networks to financial institutions. 
  
 Google has not yet responded to our request for an interview with Mehta. 
  
 Photo by perspec_photo88/Flickr (CC BY-SA 2.0) ||||| File picture illustration of the word 'password' pictured through a magnifying glass on a computer screen, taken in Berlin May 21, 2013. 
  
 BOSTON (Reuters) - Hackers could crack email systems, security firewalls and possibly mobile phones through the "Heartbleed" computer bug, according to security experts who warned on Thursday that the risks extended beyond just Internet Web servers. 
  
 The widespread bug surfaced late on Monday, when it was disclosed that a pernicious flaw in a widely used Web encryption program known as OpenSSL opened hundreds of thousands of websites to data theft. Developers rushed out patches to fix affected web servers when they disclosed the problem, which affected companies from Amazon.com Inc and Google Inc to Yahoo Inc. 
  
 Yet pieces of vulnerable OpenSSL code can be found inside plenty of other places, including email servers, ordinary PCs, phones and even security products such as firewalls. Developers of those products are scrambling to figure out whether they are vulnerable and patch them to keep their users safe. 
  
 "I am waiting for a patch," said Jeff Moss, a security adviser to the U.S. Department of Homeland Security and founder of the Def Con hacking conference. Def Con's network uses an enterprise firewall from McAfee, which is owned by Intel Corp's security division. 
  
 He said he was frustrated because people had figured out that his email and Web traffic is vulnerable and posted about it on the Internet - but he can't take steps to remedy the problem until Intel releases a patch. 
  
 "Everybody is going through the exact same thing I'm going through, if you are going through a vendor fix," he said. 
  
 An Intel spokesman declined comment, referring Reuters to a company blog that said: "We understand this is a difficult time for businesses as they scramble to update multiple products from multiple vendors in the coming weeks. The McAfee products that use affected versions of OpenSSL are vulnerable and need to be updated." 
  
 It did not say when they would be released. 
  
 The Heartbleed vulnerability went undetected for about two years and can be exploited without leaving a trace, so experts and consumers fear attackers may have compromised large numbers of networks without their knowledge. 
  
 Companies and government agencies are now rushing to understand which products are vulnerable, then set priorities for fixing them. They are anxious because researchers have observed sophisticated hacking groups conducting scans of the Internet this week in search of vulnerable servers. 
  
 "Every security person is talking about this," said Chris Morales, practice manager with the cybersecurity services firm NSS Labs. 
  
 Cisco Systems Inc, the world's biggest telecommunications equipment provider, said on its website that it is reviewing dozens of products to see if they are safe. It uncovered about a dozen that are vulnerable, including a TelePresence video conferencing server, a version of the IOS software for managing routers. A company spokesman declined to comment on how those issues might affect users, saying Cisco would provide more information as it became available. 
  
 Oracle Corp has not posted such an advisory on its support site. Company spokeswoman Deborah Hellinger declined to comment on Heartbleed. 
  
 Microsoft Corp, which runs a cloud computing and storage service, the Xbox platform and has hundreds of millions of Windows and Officer users, said in a statement that "a few services continue to be reviewed and updated with further protections." It did not identify them. 
  
 Officials with technology giants IBM and Hewlett-Packard Co could not be reached. EMC Corp and Dell said they had no immediate comment. 
  
 Security experts said the vulnerable code is also found in some widely used email server software, the online browser anonymizing tool Tor and OpenVPN, as well as some online games and software that runs Internet-connected devices such as webcams and mobile phones. 
  
 Jeff Forristal, chief technology officer of Bluebox Security, said that version 4.1.1 of Google's Android operating system, known as Jelly Bean, is also vulnerable. Google officials declined comment on his finding. 
  
 Other security experts said that they would avoid using any device with the vulnerable software in it, but that it would take a lot of effort for a hacker to extract useful data from a vulnerable Android phone. 
  
 (Editing by Edwin Chan and Eric Walsh) |||||
Output:
Conspiracy theories have been building about Heartbleed, but the man whose coding error caused the vulnerability says it was an honest mistake. Dr. Robin Seggelman, a German programmer, says he was trying to improve OpenSSL with the patch that introduced Heartbleed—his other patches to the open-source software project have fixed bugs and added new features. "It was a simple programming error," he tells the Sydney Morning Herald, and a "quite trivial" one at that—which happened to have a "severe" impact. The OpenSSL consultant who reviewed the patch missed the mistake too—reviewers generally look only at how an algorithm works, not the code itself, one expert explains. Seggelman, 31, is an influential and burgeoning academic who has been working on cybersecurity issues since 2009. He introduced the patch on New Year's Eve, 2011. "It's hard to be mad at a guy so devoted to a project that he was doing bug fixes on a holiday," writes Kashmir Hill at Forbes. In other Heartbleed news: A Google Security researcher who helped expose the bug is donating the $15,000 reward he earned for doing so to a crowdfunding campaign to create encryption tools for journalists to help them avoid the watchful eye of the NSA and US government, the Daily Dot reports. Neel Mehta's contribution pushed the campaign over its $100,000 goal. Meanwhile, security experts warn Reuters that the Heartbleed bug's impact could extend beyond web servers, possibly allowing hackers to crack mobile phones and even security products like firewalls.