OpenSSL will release a high-severity issue fix on 25th

Re:OpenSSL will release a high-severity issue fix on 25th by airhead969 on Monday March 22, 2021 @05:31PM (#26547433)

It's swiss-army chainsaw juggling with a kitchen-sink of unnecessary features, bloat, and poor coding hygiene.

C isn't the problem per se, it's the lack of quality, formal rigor, and testing that these slap-dash developers foist on the world. It's a steaming pile, and people wonder why it has security vulnerabilities over and over again. It's doing the same damn thing and expecting a different result: C maybe part of it, but its developers just aren't that great.

[ Parent | on HN ]

Re:OpenSSL will release a high-severity issue fix on 25th by rafaelturk on Monday March 22, 2021 @05:33PM (#26547460)

Can't wait for your PR!

[ Parent | on HN ]

Re:OpenSSL will release a high-severity issue fix on 25th by ori_b on Monday March 22, 2021 @05:42PM (#26547613)

https://www.libressl.org/

[ Parent | on HN ]

Re:OpenSSL will release a high-severity issue fix on 25th by nightpool on Monday March 22, 2021 @05:58PM (#26547839)

As mentioned down-thread, LibreSSL patched a use-after-free just last week.

[ Parent | on HN ]

Re:OpenSSL will release a high-severity issue fix on 25th by airhead969 on Monday March 22, 2021 @06:11PM (#26548004)

It's a fork of swiss-army chainsaw juggling with training wheels. It is a slowly-dying project because it's not keeping up and distros are dropping it. It's not a viable alternative.

[ Parent | on HN ]

Re:OpenSSL will release a high-severity issue fix on 25th by ori_b on Monday March 22, 2021 @07:04PM (#26548627)

And yet, it's managed to avoid many of the OpenSSL CVEs.

It's not a "viable alternative" because nobody cares enough to test their code against it.

[ Parent | on HN ]