Was the iOS SSL Flaw Deliberate?

Re:Was the iOS SSL Flaw Deliberate? by gmac on Thursday February 27, 2014 @08:57AM (#7312121)

As noted in the article, plausible deniability is a key criterion for thinking of this as a possible NSA insertion.

In other words, it's only possible that it's an NSA job if it's also possible that it isn't. Something tells me therefore that we're unlikely ever to know for sure.

[ Parent | on HN ]

Re:Was the iOS SSL Flaw Deliberate? by maxerickson on Thursday February 27, 2014 @09:20AM (#7312260)

Doesn't it strain credulity that the NSA would (bother to) insert a flaw that would be detected by many commercially available analysis tools (or the right compiler flags)?

(I certainly shouldn't pretend to know much about C, but the above matches my understanding of the situation)

[ Parent | on HN ]

Re:Was the iOS SSL Flaw Deliberate? by gmac on Thursday February 27, 2014 @09:23AM (#7312280)

Well, since it worked, perhaps not?

[ Parent | on HN ]

Re:Was the iOS SSL Flaw Deliberate? by smackfu on Thursday February 27, 2014 @11:48AM (#7313199)

Who's to say the NSA doesn't know what analysis tools Apple runs as part of their builds?

[ Parent | on HN ]

Re:Was the iOS SSL Flaw Deliberate? by mzs on Thursday February 27, 2014 @11:46AM (#7313187)

If it was not simply an error, why does it have to be the NSA?

[ Parent | on HN ]

Re:Was the iOS SSL Flaw Deliberate? by interstitial on Thursday February 27, 2014 @09:16AM (#7312236)

Don't scare the geeks of HN. They have well-tuned, waffle-brains with syrup-tight barriers. Suggesting there is a world with blurry boundaries scares them.

[ Parent | on HN ]

Re:Was the iOS SSL Flaw Deliberate? by Jgrubb on Thursday February 27, 2014 @09:19AM (#7312254)

Posting this comment on HN hints at a lack of self awareness.

[ Parent | on HN ]