News for hackers. Stuff that matters.

A comment on MtGox.com is offline. Parent comment

Re:MtGox.com is offline by ultramancool on Tuesday February 25, 2014 @03:26PM (#7300226)
This is so very true, OpenSSH is probably one of the most secure pieces of software around. It has extremely high value to attackers, yet has had extremely few remote security holes in its lifetime.

They've invested years and many talented people in developing such a piece of software.

If you want to write your own ssh server in php, you should probably consider your motivation and how you can re-use their code or operate through it instead if your purpose if anything other than experimentation.

[ Parent | on HN ]
Re:MtGox.com is offline by MrBuddyCasino on Tuesday February 25, 2014 @06:20PM (#7301457)
Yeah, thats what I thought too, until I read this little gem, suggesting that OpenSSL was written by monkeys: http://www.peereboom.us/assl/assl/html/openssl.html

Its kinda hard to disagree with that conclusion.

[ Parent | on HN ]
Re:MtGox.com is offline by danielweber on Wednesday February 26, 2014 @11:44AM (#7305959)
You shouldn't be using OpenSSL unless you are an expert in crypto and software development. It's not easy to use and it shouldn't be.

I can't say those difficulties he had in using the library were put there on purpose to keep people like him out, but it seems to be a good effect here.

[ Parent | on HN ]
Re:MtGox.com is offline by deciplex on Tuesday February 25, 2014 @10:21PM (#7302668)
OpenSSH is not OpenSSL.
[ Parent | on HN ]
Re:MtGox.com is offline by MrBuddyCasino on Wednesday February 26, 2014 @09:28AM (#7305059)
Dang, guess that joke's on me. Wouldn't have realized it, thx for the correction.
[ Parent | on HN ]