News for hackers. Stuff that matters.
Re:"OpenSSL has exploit mitigation countermeasures to make s... by kryptiskt on Wednesday April 09, 2014 @05:48AM (#7558450)
On the other hand, if the NSA pwned OpenSSL, shouldn't such a big thing have been in Snowden's docs?
Re:"OpenSSL has exploit mitigation countermeasures to make s... by bhouston on Wednesday April 09, 2014 @05:50AM (#7558459)
The NSA, according to the Snowden docs, can break SSL. No details though: http://blog.cryptographyengineering.com/2013/12/how-does-nsa...
Re:"OpenSSL has exploit mitigation countermeasures to make s... by computer on Wednesday April 09, 2014 @10:00AM (#7559286)
Those documents do not say they can break SSL. They say they focus on SSL, and can break some specific SSL-using services.
Re:"OpenSSL has exploit mitigation countermeasures to make s... by TranceMan on Wednesday April 09, 2014 @10:40AM (#7559532)
Would the specific be the version of openssl being used by the 'target'?

Can't look right now but was this 'bug' introduced at some point in time?

Re:"OpenSSL has exploit mitigation countermeasures to make s... by computer on Wednesday April 09, 2014 @05:53AM (#7558467)
This bug was added 2 years ago, the Snowden documents are from before that, as far as I know.
Re:"OpenSSL has exploit mitigation countermeasures to make s... by canvia on Wednesday April 09, 2014 @10:01AM (#7559292)
In Snowden's TED talk he said that the best reporting is yet to come.

http://www.ted.com/talks/edward_snowden_here_s_how_we_take_b...

Re:"OpenSSL has exploit mitigation countermeasures to make s... by lotsofcows on Wednesday April 09, 2014 @06:15AM (#7558525)
It could be. Only a percentage of the documents have been analysed so far.
Re:"OpenSSL has exploit mitigation countermeasures to make s... by joshuak on Wednesday April 09, 2014 @07:02AM (#7558627)
"the absence of evidence is not the evidence of absence"

http://en.wikipedia.org/wiki/Argument_from_ignorance

Re:"OpenSSL has exploit mitigation countermeasures to make s... by TeMPOraL on Wednesday April 09, 2014 @07:49AM (#7558739)
Re:"OpenSSL has exploit mitigation countermeasures to make s... by joshuak on Wednesday April 09, 2014 @03:14PM (#7561612)
Interesting. However, your sources are rather obscure, and I'm not sure what you mean by "a weak form."

I'd say a Baysian analysis is a way to evaluate the veracity of an argument from ignorance, not necessarily a replacement of that argument. An argument from ignorance is a strict subset of a baysian analysis in which there is no causal relationship between the missing evidence, and the conclusion. This is such a case. So we can conclude by using a baysian analysis that this is in fact an argument of ignorance.

Unless, of course, you have additional statistical samples that show a non zero relationship between not knowing about NSAs activity and the fact that they are engaged in that activity.

Re:"OpenSSL has exploit mitigation countermeasures to make s... by rmc on Wednesday April 09, 2014 @06:24AM (#7558543)
Snowdon might not have known every implementation detail.