News for hackers. Stuff that matters.
Re:Heartbleed Update v3 by csoandy on Sunday April 13, 2014 @11:33PM (#7584386)
We are, in fact, evaluating those other claims, and testing them in our labs. We are also evaluating claims made by other researchers, both publicly and privately; and we hope to end up with both a better library out of this, as well as a better understanding of the hazards we do and don't provide safeties against.

Validating his first claim was sufficient to undermine our belief in key safety; the others are therefore only relevant for protection against future attacks. In that light, it was important to advise our customers and the community at large.

Re:Heartbleed Update v3 by sitkack on Monday April 14, 2014 @12:13AM (#7584506)
I think it is important to remember when validating flaws, that we show that attacks are possible not they are necessarily demonstrated. Just because one cannot construct an exploit doesn't mean that something is secure.