Security Fix in Open BSD

Re:Security Fix in Open BSD by dsantos on Thursday December 16, 2010 @08:26PM (#2014692)

de Raadt: "We've been auditing since the mail came in! We have already found two bugs in our cryptographic code. We are assessing the impact."

http://www.itwire.com/opinion-and-analysis/open-sauce/43995-...

"Until 2 days ago I had no idea that both Jason and Angelos in the past did work for a company that does that business"

[ Parent | on HN ]

Re:Security Fix in Open BSD by tptacek on Thursday December 16, 2010 @08:33PM (#2014714)

There is no way Theo didn't know Jason worked at NETSEC; Jason's a co-author of an academic paper about the OpenBSD cryptography implementation, under a NETSEC address.

[ Parent | on HN ]

Re:Security Fix in Open BSD by dsantos on Thursday December 16, 2010 @08:43PM (#2014744)

yep, you can see this post from 2000. http://monkey.org/openbsd/archive/misc/0004/msg00583.html

[ Parent | on HN ]

Re:Security Fix in Open BSD by m0nastic on Thursday December 16, 2010 @08:57PM (#2014779)

I think this followup is even more illustrative: http://monkey.org/openbsd/archive/misc/0004/msg00573.html

[ Parent | on HN ]

Re:Security Fix in Open BSD by tedunangst on Thursday December 16, 2010 @09:16PM (#2014851)

rest of quote: "And it is true, wow, that company really was in that business! Now they (the company) belong to Verizon."

What the company did is surprising, not who worked there.

[ Parent | on HN ]

Re:Security Fix in Open BSD by tptacek on Thursday December 16, 2010 @09:42PM (#2014918)

I assume you mean "what the company is alleged, by one guy, to have done".

[ Parent | on HN ]

Re:Security Fix in Open BSD by tedunangst on Thursday December 16, 2010 @10:09PM (#2014983)

Sure. I was saying "no idea" == "that business" as opposed to the "no idea" == "jason and angelos" interpretation.

[ Parent | on HN ]