Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping

Re: Critical crypto bug leaves Linux, hundreds of apps open ... by fluidcruft on Tuesday March 04, 2014 @03:34PM (#7342914)

So are you saying that GnuTLS had "valuable eyes" and missed this or that they had "many eyes" and missed this? What exactly is your alternate hypothesis?

[ Parent | on HN ]

Re: Critical crypto bug leaves Linux, hundreds of apps open ... by tptacek on Tuesday March 04, 2014 @03:37PM (#7342923)

I'm sure lots of people have tried to find bugs in GnuTLS.

[ Parent | on HN ]

Re: Critical crypto bug leaves Linux, hundreds of apps open ... by tripzilch on Wednesday March 05, 2014 @05:39PM (#7350459)

So do you mean that (until now) they just failed to find them, or that (until now) they were only found by people who did not have the incentive to report these bugs?

Because in the top post you call the bug "simple and basic".

But then in that same top post you imply (in your last line) that GnuTLS gets so very little attention, but now you say that lots of people have tried to find bugs in it.

I'm not trying to criticize you here, but trying to figure out what you're trying to say?

[ Parent | on HN ]