Programming flaw calls for new passwords, experts say

[NEW YORK] A programming mistake from two years ago has forced countless websites to make fixes to protect the sensitive personal information of consumers.

What consumers should do to protect their own information isn't quite as clear, because security experts have offered conflicting advice. Should users change their Web passwords immediately or wait until sites have fixed the problem?

Changing a password before a site has dealt with the coding flaw, called Heartbleed, means the new password could be vulnerable, and the user will have to pick another password when it is fixed. But changing a password is a minor inconvenience compared to getting personal information like credit card numbers stolen.