For the geeks reading this, skip down to the links and you can get all geek.
For the end user, here is a summary.
Internet encryption traffic is based on two keys that are generated to create a secure communications channel that, if intercepted, could not be read without the key.
The vunerability that everyone is screaming about is actually found mostly in hardware devices that generate this type of key and not in big banking and e-commerce websites. No need to put on the tinfoil hat, all is well.
Now, if you’re a business that uses a remote access solution with VPN, you should pay attention. There is chance that you’re connecting through a hardware device that generates this key that may be vunerable. I would be even more concerned if you business falls under any regulatory law (HIPAA or the like). They have not revealed specifics on what hardware and software is effected so they can notify the manufacturers first before making it common knowledge. I’m sure that anyone with malicious intent has known about this longer than we care to realize.
Link to New York Times ‘run for the hills’ response.
Link to Freedom To Tinker that has done there homework and reveals the truth.
Link to ArsTechnica article.