Re:Willem Pinckaers on Akamai's flawed OpenSSL allocator patch
by brians on Sunday April 13, 2014 @10:13PM
(#7584168)
Yup. Hard to read! Better that than not to read it.
As Rich Salz said in the post to openssl-dev, this is a prototype that nobody should take and use straight. We did think we were pretty lucky that our old patch to keep keys from being swapped to disk could help us against Heartbleed. A major voice in the internal decision about whether to release it or keep it secret as a "competitive advantage" was the possibility that we were wrong---in the hopes that someone would discover this and tell us if so. We were wrong. Pinckaers discovered this, and told us so.
He can mock my coffee as weak and my nose as big for all I care, in return for that necessary warning that we were mistaken.
As Rich Salz said in the post to openssl-dev, this is a prototype that nobody should take and use straight. We did think we were pretty lucky that our old patch to keep keys from being swapped to disk could help us against Heartbleed. A major voice in the internal decision about whether to release it or keep it secret as a "competitive advantage" was the possibility that we were wrong---in the hopes that someone would discover this and tell us if so. We were wrong. Pinckaers discovered this, and told us so.
He can mock my coffee as weak and my nose as big for all I care, in return for that necessary warning that we were mistaken.