[ EPU Foyer ] [ Lab and Grill ] [ Bonus Theater!! ] [ Rhetorical Questions ] [ CSRANTronix ] [ GNDN ] [ Subterranean Vault ] [ Discussion Forum ] [ Gun of the Week ]

Eyrie Productions, Unlimited

Subject: "Heartbleeed?"     Previous Topic | Next Topic
Printer-friendly copy    
Conferences The Forum Itself Topic #82
Reading Topic #82, reply 7
MuninsFire
Member since Mar-27-07
457 posts
Apr-12-14, 02:08 PM (EDT)
Click to EMail MuninsFire Click to send private message to MuninsFire Click to view user profileClick to add this user to your buddy list  
7. "RE: Heartbleeed?"
In response to message #6
 
   Pretty much, after you strip away some protocol bits, yeah. It's usually not a word like "potato" or "hat" or what have you, but some random numbers your computer generates.

This particular type of problem is nothing new; it's been an issue in programming for decades, but the people (staff of four, total, of which one is full-time) who develop OpenSSL are -extremely- underfunded and don't get a whole lot of time to audit for that kind of bug.

There's a LOT of software that's in extremely widespread use that has the potential to contain bugs this severe due to very similar circumstances.

For instance, for a number of years, THE database of time zone info was maintained almost entirely by one guy.

Things like browsers and word processors--the stuff people use--is sexy. Things like crypto libraries and the other stuff "under the hood" that people don't directly use? Not a lot of attention there.

In Xanadu did Kubla Khan
A stately pleasure-dome decree
Where Alph, the sacred river, ran
Through caverns measureless to man
Down to a sunless sea


  Alert | IP Printer-friendly page | Edit | Reply | Reply With Quote | Top

  Subject     Author     Message Date     ID  
 Heartbleeed? [View All] JeanneHedge Apr-11-14 TOP
   RE: Heartbleeed? Gryphonadmin Apr-11-14 1
      RE: Heartbleeed? MuninsFire Apr-11-14 2
          RE: Heartbleeed? TheOtherSean Apr-11-14 3
              RE: Heartbleeed? MuninsFire Apr-12-14 4
          RE: Heartbleeed? Terminus Est Apr-12-14 5
              RE: Heartbleeed? SpottedKitty Apr-12-14 6
                 RE: Heartbleeed? MuninsFire Apr-12-14 7
                      RE: Heartbleeed? Terminus Est Apr-13-14 8
                      RE: Heartbleeed? Senji Apr-13-14 9
                          RE: Heartbleeed? laudre Apr-14-14 10
                          RE: Heartbleeed? MuninsFire Apr-14-14 11


Conferences | Topics | Previous Topic | Next Topic

[ YUM ] [ BIG ] [ ??!? ] [ RANT ] [ GNDN ] [ STORE ] [ FORUM ] GOTW ] [ VAULT ]

version 3.3 © 2001
Eyrie Productions, Unlimited
Benjamin D. Hutchins
E P U (Colour)