Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th
by gnu8 on Tuesday March 17, 2015 @08:41AM
(#9217488)
Scorching the earth is the right thing to do. OpenSSL is the sick man of the internet and its community has been dysfunctional to non-functional for years, much like its code. The massive injection of money won't solve that problem in the long term. The security patches ought to be integrated with LibreSSL immediately, not after an embargo period dictated by the vendors who have essentially bought out OpenSSL.
[ Parent
| on HN ]
Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th
by danielweber on Tuesday March 17, 2015 @09:34AM
(#9217748)
There can be more than one bad actor in a play.