What is the Heartbleed vulnerability really about, how do you defend yourself, and how many of your favorite web sites are still vulnerable? The heartbleed bug was caused by a coding error in the OpenSSL crypto library used by 17% of all the sites on the Internet using HTTPS.