3 ms·
> Everything sucks but FOSS right? How non-biased of you. I won't mention heartbleed and shellshock then. Nope, but OpenSSH (not PAM) is leaps and bounds above
by Eridrus 11y ago
> Everything sucks but FOSS right? How non-biased of you. I won't mention heartbleed and shellshock then.
Nope, but OpenSSH (not PAM) is leaps and bounds above everything else.
Almost all of your beloved VPN software was probably susceptible to heartbleed.
But mostly I've looked at software from "security" companies, and overall it's a steaming pile of shit.
It's probably not going to get popped by non-state actors. I'd say the same things about ssh & rdp in general, but rdp has had a non-trivial amount of bugs in it.
- drzaiusapelord 11y agoCorporate VPNs aren't OpenSSL, they're usually IPSec implementations and not susceptible to heartbleed. >It's probably not going to get popped by non-state actors. Not too long ago people were making this argument but including both OpenSSL and OpenSSH. Now its just OpenSSH. Funny how that works. The reality is that layered security is a best practice and just expecting something to be perfect forever because of past performance is a very questionable premise.