[tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL

• To: grarpamp <[email protected]>
• Subject: [tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL
• From: [email protected] ([email protected])
• Date: Thu, 10 Apr 2014 23:15:12 -0400
• Cc: [email protected], [email protected]
• In-reply-to: Your message of "Thu, 10 Apr 2014 03:46:44 EDT." <CAD2Ti2_tOpe+gvwqwr3G91jnFw8T=ihsaEYsB53+6iDh8reEwQ@mail.gmail.com>

 > It makes me wonder if the NSA was involved in inserting this bug into
 > OpenSSL clients and servers.

If they did it, someone got a promotion.  If they are as surprised
as you are, someone got fired.

In the meantime, tell me that gcc is so compact and well vetted that
there is no room in it for insertions...

--dan, channeling for Ken Thompson

• Follow-Ups:
  • [tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL
    • From: [email protected] ([email protected])
  • [tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL
    • From: [email protected] (The Doctor)

• References:
  • [tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL
    • From: [email protected] (grarpamp)

• Prev by Date: a speech
• Next by Date: healthcare.gov vulnerability?
• Previous by thread: [tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL
• Next by thread: [tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL
• Index(es):
  • Date
  • Thread