News for hackers. Stuff that matters.
Re:HiveNightmare a.k.a. SeriousSAM – anybody can read the re... by pjmlp on Saturday July 24, 2021 @09:12AM (#27940649)
After how many years of deployment into production?
Re:HiveNightmare a.k.a. SeriousSAM – anybody can read the re... by formerly_proven on Saturday July 24, 2021 @09:48AM (#27940907)
If you're asking me personally, OpenSSL always had a funny smell even at the time, and so did TLS, simply because it seemed all way too complicated. TLS v1.3 agrees. As far as TLS implementations go I think pretty much all of them have had major, critical flaws. Microsoft's SChannel has had an RCE since it was born, patched the same year as Heartbleed, Apple's Secure Transport had goto fail (also in 2014 if I recall) etc.
Re:HiveNightmare a.k.a. SeriousSAM – anybody can read the re... by wutwutwutwut on Saturday July 24, 2021 @11:08AM (#27941555)
But that didn't answer his question.