News for hackers. Stuff that matters.

A comment on Theo de Raadt on OpenSSL vulnerabilities coming on the 19th.

Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th by rikkus on Tuesday March 17, 2015 @06:16AM (#9217090)
Not sure what he's saying. That the OpenSSL group are going to send the LibreSSL group vulnerabilities? That the LibreSSL group are about to disclose OpenSSL vulnerabilities? Just a bit confused!

Okay, a later story just appeared, I quote:

  "This or earlier LibreSSL releases may also address issues that are to be revealed
  by The OpenSSL Project Team on the 19th of March, 2015."
This story is probably redundant now, then.
[ Parent | on HN ]
Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th by tomaac on Tuesday March 17, 2015 @06:18AM (#9217093)
He is referring to https://mta.openssl.org/pipermail/openssl-announce/2015-Marc...
[ Parent | on HN ]
Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th by bootload on Tuesday March 17, 2015 @06:43AM (#9217155)
"This story is probably redundant now, then."

given obsd has/is doing a post heartbleed code review on OpenSSL since April 2014 to build LibreSSL [0] is it wise to assume this?

[0] http://arstechnica.com/information-technology/2014/04/openss...

[ Parent | on HN ]