Quote from: eyebuyyourcoinz on April 08, 2014, 01:15:04 PM

VoS recently announced they'd be doing an IAMA on reddit today at 13:00 EST/10:00 PST, probably to convince new participants to join them.
However if you try to sign up or log in, they show these errors:
SIGNUP TEMPORARILY DISABLED (Awaiting on an Amazon Security fix)
LOGIN TEMPORARILY DISABLED (Awaiting on an Amazon Security fix)

Announcement from their PR guy on reddit (effected should be affected):

Quote

This morning it was brought to our attention that there is a current bug with openssl that has lead to vulnerabilities in the Cryptocurrency community. While we at Vault of Satoshi are not directly effected on any of our primary servers, a third-party load balancing server could be effected. For this reason we have chosen to proactively suspend all sign access today and have contacted our third-party provider in order to get this matter resolved with the utmost haste.

We assure users that this matter is only temporary measure, that all accounts and balances are currently secure and we will be in constant communication with our provider in getting this matter resolved. Trading will be resumed as soon as the third-party updates the system software; it was not an easy decision for us to make but we would never want to take a risk with your assets.

If you have any questions feel free to reach out to our support team - we hope to be back with you shortly.

Does someone here know more about this current bug with OpenSSL that has lead to vulnerabilities in the Cryptocurrency community?

Its not just the crypto-currency community. Its basically any website that uses SSL of any sort. Like the entire Internet. Heck most servers have some sort of remote management which uses SSL of some sort to encrypt things.

http://heartbleed.com/

By my basic understanding with enough patience someone could basically read the servers RAM and pull the crypto-keys from that. With that they could in theory log into remote management on the server and do whatever. That or sit there reading all the encrypted traffic (so your username and password for example). If i was an exchange i would have shit myself when this news dropped and checked hot and cold wallets immediately.

Wont be surprised if at least one exchange has either been hacked and lost at least their hot wallet or just claims so to pocket a bunch of customer funds. Bail-ins are a bitcoin tradition now so what better reason then a major SSL flaw.