<prompt> Human: Apparently the OpenSSL software which many web sites use for encryption has a bug that allows others to potentially access user data, possibly including usernames and passwords. Heres an article, and heres a tool that will allow you to check a website to see if its at risk. Mint.com is not at risk, and neither was my bank, but CreditKarma is at risk and theres no mention of it on their page as of noon eastern time.Although LastPass uses OpenSSL, it has multiple layers of encryption, so LastPass password vaults are safe.  <response>: To be clear, this is not a new bug. The bug has been deployed to production sites since March 2012.The real problem is that private keys can be extracted which can then be used to decrypt all SSL traffic going to and from that domain. 