News for hackers. Stuff that matters.

A comment on The Heartbleed Bug.

Re:The Heartbleed Bug by mattparlane on Monday April 07, 2014 @07:34PM (#7550417)
What worries me about this is that the commit that fixes it [0] doesn't include any tests. Is that normal in crypto? If I committed a fix to a show-stopper bug without any tests at my day job I'd feel very amateur.

[0] http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=...

[ Parent | on HN ]
Re:The Heartbleed Bug by rmc on Tuesday April 08, 2014 @04:55AM (#7552208)
Sometimes things are time-critical.....
[ Parent | on HN ]
Re:The Heartbleed Bug by colinbartlett on Tuesday April 08, 2014 @01:12PM (#7554695)
Ah, the old middle-management excuse: "We don't have time to write tests!"
[ Parent | on HN ]
Re:The Heartbleed Bug by rmc on Tuesday April 08, 2014 @02:56PM (#7555243)
When half the secure internet is on fire... yeah, i think that's an acceptable time.
[ Parent | on HN ]
Re:The Heartbleed Bug by Rizz on Tuesday April 08, 2014 @08:57PM (#7557087)
When half the internet is going to install your code without much additional testing in the next day it had better be properly tested beforehand.
[ Parent | on HN ]