NSA Said to Have Used Heartbleed Bug for at Least Two Years (2014)

Re:NSA Said to Have Used Heartbleed Bug for at Least Two Yea... by MikeHolman on Friday September 20, 2019 @07:13PM (#21032241)

I don't think it's only popular in news.

I work on a web platform team, and I've seen many vulnerability reports over the years (well over 100). I've never seen a report from the NSA or US government. Actually, the only government I've seen reports from are the UK, so credit to them for actually doing something to keep people secure. But most reports I see are from project zero or Chinese companies.

Either the US government doesn't care at all about browser security or they are keeping vulnerabilities for themselves.

[ Parent | on HN ]

Re:NSA Said to Have Used Heartbleed Bug for at Least Two Yea... by blackflame7000 on Saturday September 21, 2019 @07:08PM (#21038469)

No, the US government has taken the position that it’s always best to have a few tricks up your sleeve when the chips are down. It is most certainly intentional stock piling of zero days for strategic advantage.

[ Parent | on HN ]

Re:NSA Said to Have Used Heartbleed Bug for at Least Two Yea... by elcomet on Friday September 20, 2019 @07:58PM (#21032504)

French gov (CERT-FR and ANSII) made recommendations about heartbleed.

[ Parent | on HN ]