News for hackers. Stuff that matters.

A comment on "OpenSSL has exploit mitigation countermeasures to make sure it's exploitable". Parent comment

Re:"OpenSSL has exploit mitigation countermeasures to make s... by arca_vorago on Wednesday April 09, 2014 @10:23AM (#7559427)
I think now would be great time to reconsider the OpenBSD ipsec debacle in this kind of new light. Correct me if I'm wrong, but doesn't ssh use openssl libraries and the openbsd guys were heavily involved in openssl's development? A lot of people think the closed audit that found a minor unintentional bug was the last word on this subject, but the orginal guy who made the claim posted in 2012 further explaining how the FBI had made this attempt.

Can't wait to find out SSH is comprimised too!

[ Parent | on HN ]
Re:"OpenSSL has exploit mitigation countermeasures to make s... by mzs on Wednesday April 09, 2014 @02:35PM (#7561327)
openssl was not created by the same people behind openbsd.
[ Parent | on HN ]
Re:"OpenSSL has exploit mitigation countermeasures to make s... by arca_vorago on Thursday April 10, 2014 @01:02PM (#7567878)
You are correct, just got done reading Theo's rants on the subject and realized I was mistaken, so apologies. The same style of potential subversion may be at hand, regardless.
[ Parent | on HN ]