News for hackers. Stuff that matters.

A comment on NSA Said to Have Used Heartbleed Bug for at Least Two Years (2014). Parent comment

Re:NSA Said to Have Used Heartbleed Bug for at Least Two Yea... by wnevets on Friday September 20, 2019 @04:51PM (#21031161)
Well the real question isn't if NSA used it but if they knew about it long before everyone else and never reported it.
[ Parent | on HN ]
Re:NSA Said to Have Used Heartbleed Bug for at Least Two Yea... by tptacek on Friday September 20, 2019 @05:49PM (#21031675)
That's how CNO exploitation works. They generally can't report; their adversaries are recording their own networks, and will retrospectively detect intrusions.
[ Parent | on HN ]
Re:NSA Said to Have Used Heartbleed Bug for at Least Two Yea... by grumio on Friday September 20, 2019 @05:16PM (#21031357)
It's their SOP. See: eternal blue. https://en.m.wikipedia.org/wiki/EternalBlue
[ Parent | on HN ]