News for hackers. Stuff that matters.

A comment on Heartbleed disclosure timeline: who knew what and when. Parent comment

Re:Heartbleed disclosure timeline: who knew what and when by ig1 on Tuesday April 15, 2014 @05:10AM (#7590976)
I believe standard procedure would be for IRS to report it to US-CERT who are part of the Department of Homeland Security.
[ Parent | on HN ]
Re:Heartbleed disclosure timeline: who knew what and when by anfedorov on Tuesday April 15, 2014 @05:57AM (#7591060)
I believe standard procedure would be for IRS to report it to US-CERT who are part of the Department of Homeland Security.

At which point (I imagine), decisions would be made along the same lines as I described, the key questions being "can we keep it secret?" and "who has this capability?".

I tried to be nation-agnostic, as I imagine there may be a bit of difference in how a given nations' intelligence agency weighs the value of their offensive capabilities and the public defensive capabilities in light of who knows about the bug.

[ Parent | on HN ]