Re:"OpenSSL has exploit mitigation countermeasures to make s...
by rbanffy on Wednesday April 09, 2014 @08:00AM
(#7558761)
> the NSA is interested in gaining access to systems in a way that doesn't allow basically anyone to ride on their coattails.
If possible, yes. However, if they were indeed responsible for this, they'd probably have a couple honeypots to detect exploitation by third parties. If they considered the third party harmless, they could decide whether the vulnerability should be "independently discovered" or not.
Planting a complicated exploit would be harder and increase the risk it could be traced back to them.
If possible, yes. However, if they were indeed responsible for this, they'd probably have a couple honeypots to detect exploitation by third parties. If they considered the third party harmless, they could decide whether the vulnerability should be "independently discovered" or not.
Planting a complicated exploit would be harder and increase the risk it could be traced back to them.