content: See if http://heartbleed.com/ can explain it, they go over all details and implications. No doubt it was a huge hole, but those of us who are paranoid were pretty much safe. Here is a youtube vid that I recommend watching first:  https://www.youtube.com/watch?v=WgrBrPW_Zn4  Operating system distribution with versions that are not vulnerable: Debian Squeeze (oldstable), OpenSSL 0.9.8o-4squeeze14  I always stick with stable releases so Debian Squeeze (oldstable) + Tor probably made me immune.  Also, just another reason I love Tor, it's users were generally unaffected:  Clients: The browser part of Tor Browser shouldn't be affected, since it uses libnss rather than openssl.  Other aspects were effected, but with libnss I doubt many (if any casual users were effected). Source: https://blog.torproject.org/blog/openssl-bug-cve-2014-0160