Re:Alpine Edge has switched to libressl
by nickpsecurity on Thursday October 13, 2016 @01:46AM
(#12698755)
Is that the one where they check for endianness changes while the program is running? One of those moments where I was stunned by the stupidity of what I was hearing.
[ Parent
| on HN ]
Re:Alpine Edge has switched to libressl
by qwertyuiop924 on Thursday October 13, 2016 @11:05AM
(#12701191)
The OSSL outlook is that both the OS and the hardware were designed by untrustworthy, paranoid, schizophrenics who wanted OSSL crash and burn. I wouldn't expect intelligence, sanity, rhyme, or reason.
Re:Alpine Edge has switched to libressl
by protomyth on Thursday October 13, 2016 @10:03AM
(#12700804)
Yep. Hearing that solution to the problem was just beyond reason. Its like they didn't just set some compile flags and constants for the architecture, but decided that their code had to calculate it every time the variable is needed. The line about finding if /dev/null moved was also pretty scary.
> finding if /dev/null moved
Couldn't find that, do you have a reference somewhere? (I only watched the video that mrweasel posted.)
Re:Alpine Edge has switched to libressl
by protomyth on Monday October 17, 2016 @10:02AM
(#12725062)
43:16 into the video I posted
Re:Alpine Edge has switched to libressl
by nickpsecurity on Thursday October 13, 2016 @12:02PM
(#12701660)
I remember cracking up then forwarding it to all kinds of people and forums. Along the lines of "remember this" if you try to justify trusting the OpenSSL codebase for anything.
Re:Alpine Edge has switched to libressl
by qwertyuiop924 on Thursday October 13, 2016 @02:20PM
(#12702858)
...Which is why LibreSSL was started in the first place: Trusting OSSL is fundamentally insane.