Quote from: grue on April 09, 2014, 04:00:49 AM

oh look, this sort of fearmongering again. On bitcoin-qt, you're not compromised unless you clicked a bitcoin payment link.

Quote from: awesomeami on April 08, 2014, 10:54:36 PM

Change ALL YOUR PASSWORDS on banking systems, gmail, FB, this forum, all https

what if i told you that all of the major browsers do not use openssl? chrome and firefox use NSS, and microsoft uses their own closed source solution. What if I also told you that the vulnerability does not include code injection, so unless you entered passwords into a openssl application, you're safe.

The memory of the browser is compromised, no need to type any password... it is enough if they are in the part of your RAM that can be dumped to the attacker. Same for session IDs.
Good news that chrome and firefox are not affected.