The Heartbleed Bug

Wed, 09/04/2014 - 13:10
Cloud Services

You are probably aware of the news report this week (8th April 2014) highlighting a serious flaw with OpenSSL which could potentially have a serious impact on some web-based services.

The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs). For more information visit

Redstor are taking this matter extremely seriously and have performed extensive testing of all our internal and external services for the vulnerability.

We are happy to confirm that Redstor backup and storage services have not been affected by the Heartbleed vulnerability as they are not reliant on OpenSSL Protocol communications. Furthermore, all customer data stored on Redstor’s backup platforms is protected by AES (Advanced Encryption Standards) and remains secure against known vulnerabilities.

As a number of Redstor’s key services rely on load balancing technologies, we have also established and can confirm there is no susceptibility to any attacks on the load balancers directly.

For users of our remote device managment software, CentraStage have released a statement regarding this issue which can be found here:

In summary, CentraStage have advised end users to change passwords with immediate effect.

Whilst all data stored by Redstor is encrypted with a minimum of 128-bit AES, we have proactively been in dialogue with our software distributors and service providers to ensure our systems are fully protected against known vulnerabilities and security threats.

Redstor would like to take this opportunity to remind all our customers to follow best security practice, which includes securely storing encryption keys and passwords. Redstor would also like to remind you that Redstor never want to know or need to know any of your encryption keys.  This information should also never be disclosed to third parties. Customers have sole ownership of their encryption keys.

Redstor’s range of secure and encrypted cloud services are already protecting the data of over 10,000 organisations across the UK. Redstor’s Online Backup service ensures data is safely backed up offsite in an encrypted format. Our cloud sync and share service, Centrastor, enables organisations to store and share files securely online from any device with an Internet connection and our CentraStage service enables support providers to guarantee that devices they support are regularly audited, patched and safely up-to-date for effective endpoint management. Our Virtual Disaster Recovery service guarantees to have your systems up and running within minutes following a disaster. To find out more about our services and how we can help you comply with data protection laws and prevent data leakage, please contact us either by giving us a ring on 01189 515 200 or emailing [email protected].

Recent Articles

Redstor_restore_failed_blog Data Backup

3, 2, 1 Restore… Failed

Backup is a key element of protecting data and more importantly ensuring that data can be recovered in the event of loss, breach or corruption. For... read more

March 15, 2018
Redstor_Equifax_blog Disaster Recovery

Equifax Has A Problem That Is Worth Half A Billion

The infamous Equifax data breach has once more expanded, the company announced last week that a further 2.4 million consumers in the United States... read more

March 13, 2018
Redstor_what_strategies_exist_to_replace_legacy_backup_blog Data Backup

What Strategies Exist To Replace Legacy Backup?

Legacy or traditional backup methods are typically defined as methods of copying data from its primary location to hardware or media that can be... read more

March 08, 2018