News for hackers. Stuff that matters.

A comment on Willem Pinckaers on Akamai's flawed OpenSSL allocator patch. Parent comment

Re:Willem Pinckaers on Akamai's flawed OpenSSL allocator patch by gojomo on Sunday April 13, 2014 @06:16PM (#7583336)
How would a less-aggressive tone be better at delivering the necessary info to Akamai and its customers?
[ Parent | on HN ]
[deleted]
Re:Willem Pinckaers on Akamai's flawed OpenSSL allocator patch by makomk on Sunday April 13, 2014 @07:34PM (#7583646)
The fact the code is badly written and wouldn't run isn't even the biggest problem with it though - a bigger issue is that the author didn't appear to realise there were copies of the key they'd missed that weren't protected. They very likely made the same mistake with their production systems and their analysis of those production systems.
[ Parent | on HN ]