Re:Why Heartbleed doesn't leak the private key [retracted]
by tptacek on Wednesday April 09, 2014 @03:35PM
(#7561771)
Wait, what? Didn't someone just post to Twitter this morning that they'd successfully recovered private keys from FreeBSD + Apache?
It's true, private keys are one of the harder things to pull out of OpenSSL due to the memory lifecycle of private keys. But this blog posts goes too far with that analysis.
It's true, private keys are one of the harder things to pull out of OpenSSL due to the memory lifecycle of private keys. But this blog posts goes too far with that analysis.