Unterhaltung

Nachrichten

1. benfell Computer and Network Security

   !security - I'm feeling like I haven't been paying enough attention to the travails of openssl. Is the project just having a bad year? Is this normal? Is it time to switch to libressl or something else?

   Monday, 15-Jun-15 00:22:04 UTC von cybernude.org
   • lnxw48

     @benfell If it were only #OpenSSL, then switching might help. My understanding is that newly-discovered vulnerabilities are appearing in nearly every security library. I wouldn't expect #LibreSSL to be exempt, particularly since they started with OpenSSL's code.

     Monday, 15-Jun-15 00:43:48 UTC
   • lnxw48

     @benfell The good thing, IMO, is that most of these were probably lying there, unknown to those outside of large national governments. Now that they are being discovered and patched, there are fewer openings for such orgs to exploit.

     Monday, 15-Jun-15 00:46:41 UTC
   • mmn Computer and Network Security , lnxw48

     @benfell @lnxw48 !security More like #OpenSSL has a really good year. Funding, peer review, patching... All of these things people note have existed a long time - but aren't unearthed until now. But then again most very recent stu…

     Monday, 15-Jun-15 07:16:58 UTC