News for hackers. Stuff that matters.

thebackwardsman

Re:LibreSSL on Tuesday April 22, 2014 @03:59AM (#7626362)
Count the number of vulnerabilities in OpenSSL over the last few years, relative to the size of its code base. A single vulnerability, albeit bad this year, results in a fork and the attitude of "it had its chance."

LibreSSL inherits all of the undiscovered vulnerabilities in its huge code base. I hope your harsh criticism carries over to its code base once these flaws are discovered here too. That's the beauty of open source.

Re:LibreSSL on Tuesday April 22, 2014 @03:35AM (#7626300)
Agreed. This is a bit scary. I feel the resources would be better off focusing on merging with the official OpenSSL project rather than forking and _then_ asking for funding, essentially taking any potential funding from the official OpenSSL project.