News for hackers. Stuff that matters.
Re:The Heartbleed Bug by NelsonMinar on Monday April 07, 2014 @05:16PM (#7549576)
I'm very curious to see the change that introduced the bug in the first place. According to the announcement it was introduced in 1.0.1. That's the version that added Heartbeat support, so maybe it was a bug from the beginning.
Re:The Heartbleed Bug by syzzer on Monday April 07, 2014 @06:43PM (#7550145)
Yes, this has been introduced in the original heartbeat extension commit (01-01-2012):

http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=bd69...